UbuntuUpdates.org

Package "liblwp-protocol-https-perl"

Name: liblwp-protocol-https-perl

Description:

HTTPS driver for LWP::UserAgent
Latest version: 6.04-2ubuntu0.1
Release: trusty (14.04)
Level: security
Repository: main
Homepage: https://metacpan.org/release/LWP-Protocol-https/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "liblwp-protocol-https-perl"

All arch deb package
APT INSTALL

Other versions of "liblwp-protocol-https-perl" in Trusty

Repository Area Version
base main 6.04-2
updates main 6.04-2ubuntu0.1

Changelog

Version: 6.04-2ubuntu0.1 2014-07-17 18:06:37 UTC

  liblwp-protocol-https-perl (6.04-2ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect peer cert verification
    - debian/patches/746579-fix-peer-certificate-verification.patch: don't
      completely disable cert verification if only hostname verification is
      disabled in lib/LWP/Protocol/https.pm.
    - CVE-2014-3230
  * debian/patches/fix-https-proxy: updated to work with security fix.
  * debian/patches/cert.patch: refreshed
 -- Marc Deslauriers <email address hidden> Fri, 27 Jun 2014 16:23:46 -0400
CVE-2014-3230 HTTPS_CA_DIR or HTTPS_CA_FILE disables peer certificate verification for IO::Socket::SSL


About   -   Send Feedback to @ubuntu_updates