This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
[SECURITY] gnutls
- From: Yaakov Selkowitz <yselkowitz at cygwin dot com>
- To: cygwin-apps at cygwin dot com
- Date: Mon, 26 Sep 2016 02:00:11 -0500
- Subject: [SECURITY] gnutls
- Authentication-results: sourceware.org; auth=none
Dr. Volker,
Two security issues have been reported in GnuTLS:
https://www.gnutls.org/security.html#GNUTLS-SA-2016-2
https://www.gnutls.org/security.html#GNUTLS-SA-2016-3
At this point, I think the best way to proceed would be to:
1) release 3.3.24 with the patch for the latter, then;
2) update to 3.4.15, which involves an ABI break.
--
Yaakov