[Pkg-mono-svn-commits] [mono] annotated tag debian/3.2.8+dfsg-10 created (now 7ef5b97)

[Jo Shields]

This is an automated email from the git hooks/post-receive script.

directhex pushed a change to annotated tag debian/3.2.8+dfsg-10
in repository mono.

        at  7ef5b97   (tag)
   tagging  9c92f9329785d64359ebaa661e78e77b3e3c8f7e (commit)
  replaces  debian/3.2.8+dfsg-9
 tagged by  Jo Shields
        on  Thu Mar 19 11:15:18 2015 +0000

- Log -----------------------------------------------------------------
mono Debian release 3.2.8+dfsg-10

Jo Shields (4):
      Mono's implementation of the SSL/TLS stack failed to check the order of the handshake messages. Which would allow various attacks on the protocol to succeed. ("SKIP-TLS" attack). (Closes: #780751, CVE-2015-2318)
      Remove the client-side SSLv2 fallback. There's almost no SSLv3 web site left so a v2 fallback is only extra code we do not need to carry forward. (Closes: #780751, CVE-2015-2320)
      Remove the EXPORT ciphers and related code path. That was still useful in 2003/2004 but the technical and legal landscape changed a lot since then. Removing the old, limited key size, cipher suites also allow removed additional parts of the code that deals with them. ("FREAK" attack) (Closes: #780751, CVE-2015-2319)
      finalize changelog

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-mono/packages/mono.git