This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
Re: SECURITY: gnutls
- From: Chris Sutcliffe <ir0nh34d at gmail dot com>
- To: cygwin-apps at cygwin dot com
- Date: Mon, 17 Oct 2011 20:45:23 -0400
- Subject: Re: SECURITY: gnutls
- References: <1318790948.7624.14.camel@YAAKOV04>
On 16 October 2011 14:49, Yaakov (Cygwin/X) wrote:
> Dr. Volker Zell,
>
> gnutls 2.8.6 is susceptible to CVE-2009-3555. ?This has been fixed since
> 2.10.0, but the current stable releases are 2.12.11 (ABI-compatible with
> 2.8.6) and 3.0.4 (which breaks ABI compatibility). ?For now, please
> release 2.12.11 ASAP for all the apps currently dependent on
> libgnutls26.
Is Dr. Volker Zell still active? The last post I can find from him
was from June of last year:
http://sourceware.org/ml/cygwin/2010-06/msg00009.html
Chris
--
Chris Sutcliffe
http://emergedesktop.org
http://www.google.com/profiles/ir0nh34d