-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 May 2014 22:45:39 +0200 Source: liblwp-protocol-https-perl Binary: liblwp-protocol-https-perl Architecture: source all Version: 6.04-3 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: liblwp-protocol-https-perl - HTTPS driver for LWP::UserAgent Closes: 746579 Changes: liblwp-protocol-https-perl (6.04-3) unstable; urgency=medium . * Team upload. . [ gregor herrmann ] * debian/control: remove Nicholas Bamber from Uploaders on request of the MIA team. * Strip trailing slash from metacpan URLs. . [ Salvatore Bonaccorso ] * Refresh cert.patch for offset * Add 746579-fix-peer-certificate-verification.patch patch. Fixes "HTTPS_CA_DIR or HTTPS_CA_FILE disables peer certificate verification for IO::Socket::SSL". When the intention was to only disable hostname verification LWP::Protocol::HTTPS disabled also the peer certificate verification completely. (CVE-2014-3230) Thanks to Jakub Wilk and Steffen Ullrich (Closes: #746579) * Update fix-https-proxy for fixed behaviour of LWP::Protocol::https Checksums-Sha1: 454b1cfa58b971b400cc3db61586a2543b5a217c 2256 liblwp-protocol-https-perl_6.04-3.dsc bac256c69981c68f2fb05ca75e0cb8ec4b84dffb 7320 liblwp-protocol-https-perl_6.04-3.debian.tar.xz d828ebf12b7aa370dfe7db6014698c1105f10192 8274 liblwp-protocol-https-perl_6.04-3_all.deb Checksums-Sha256: 9d9898b00bc092cff6ebb12c64edb50e964c4ce292b3ce8940dc2911ad2eba70 2256 liblwp-protocol-https-perl_6.04-3.dsc d405b8836241be9e30b8bb91384c798d5d78b426352c5d8ec71a77ed507de363 7320 liblwp-protocol-https-perl_6.04-3.debian.tar.xz 40e5bdaee6a354b7103dbb26eaa9dc5fd518537e701b99866d34ea098540e01e 8274 liblwp-protocol-https-perl_6.04-3_all.deb Files: 1e4e0d480936b3f31d2a73a70335ff6d 8274 perl optional liblwp-protocol-https-perl_6.04-3_all.deb ff0ea6f73469c69fc92edca6fe4aaa5c 2256 perl optional liblwp-protocol-https-perl_6.04-3.dsc 6b4c3d272aae4de0f6d6ed5f2ec420dc 7320 perl optional liblwp-protocol-https-perl_6.04-3.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJTcoUIAAoJEAVMuPMTQ89EyUwP/28ir378pXUDnsOZH5jdhkmd 13OsIo25E+78XznYkGP0ZYg23ZcPHIjyWhWjfoFS1Hgf/jvOMWpnebz2LuWYq9j2 dTcGSC60BP7JhBBXsYYtLucw3p0/yrZbTqoOviSOFSe0hIjceIs8vfjVl80LgSg3 atjDYEYC1eQD5Q/gWjqhcZRJjzp44YEYic/5aDBr5PkZuhllYBWbzOVkRziraJAU 6t86ldGFCRC0JPFcxaGK8BfHGHcybHoRD5//jveyX6uWXIRNzVFbG8+f+NI4/F4q a/BSAUpwPjuMv9k5MK00F4orakXODlOzpm2La2XFbaQRuDVp4fG2lRZGaREMvSTB QzINoozQRLQYp0Nv3p3YinnQJgWMZCOB1uVWKL3w/IGqUKvqEipoYWGOFquCifPQ 3fAZoTX0dxLvvkLWs0zRvIdPz28PpIdwV+AJfZKVKTK7XJtOXO3VcqvmHAz7M7KE c5JGslSGbuNjNsb7TYTZ7rYgtityGTDwCRX0vNqO0kfDSuu/4YFrMa+EaVeWSSUB luZq8BiR04vA2L8n9c7UhpMNLitNkFHZr2b/XK1PT3vfvugHT7xvhBHotLOekzZN 1hGa9AE708sApyIFHXoc/Yg8MsjGxmb8jLKh5kA720tS/3Gtkz3n5qBBmuLLSjKB jwBpd6UKBKGDYz5YTv/L =nI/z -----END PGP SIGNATURE-----
