gnutls12 1.2.9-2ubuntu1.7 source package in Ubuntu

Changelog

gnutls12 (1.2.9-2ubuntu1.7) dapper-security; urgency=low

  * SECURITY UPDATE: fix improper handling of '\0' in Common Name (CN) and
    Subject Alternative Name (SAN) in X.509 certificates (LP: #413136)
    - debian/patches/91_CVE-2009-2730.diff: verify length of CN and SAN
      are what we expect and error out if either contains an embedded \0.
      This fixed required fixing gnutls_x509_crt_check_hostname() to not
      "treat absence of CN in subject as a successful RFC 2818 hostname"
      This fix also required updating _gnutls_hostname_compare() in
      lib/x509/rfc2818_hostname.c to support wide wildcard hostname and ip
      address matching. This is a backward compatible change and which only
      adds additional matching of hostnames.
    - CVE-2009-2730

 -- Jamie Strandboge <email address hidden>   Tue, 18 Aug 2009 14:21:17 -0500