This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
[SECURITY] gnutls (CVE-2015-6251)
- From: Yaakov Selkowitz <yselkowitz at cygwin dot com>
- To: "cygwin-apps at cygwin dot com" <cygwin-apps at cygwin dot com>
- Date: Mon, 24 Aug 2015 12:36:10 -0500
- Subject: [SECURITY] gnutls (CVE-2015-6251)
- Authentication-results: sourceware.org; auth=none
Dr. Volker,
http://www.gnutls.org/security.html#GNUTLS-SA-2015-3
Fix: upgrade to 3.3.17, which is supposed to be ABI-compatible with 3.2
(minus the removal of the libgnutls-xssl wrapper library, which is
unused AFAIK), OR add the following patch to 3.2.20:
https://gitlab.com/gnutls/gnutls/commit/272854367efc130fbd4f1a51840d80c630214e12.diff
TIA,
Yaakov