[Pkg-mono-svn-commits] [mono] annotated tag debian/2.10.8.1-8+deb7u1 created (now ccb8e7c)
Jo Shields
directhex at moszumanska.debian.org
Thu Mar 19 14:49:12 UTC 2015
This is an automated email from the git hooks/post-receive script.
directhex pushed a change to annotated tag debian/2.10.8.1-8+deb7u1
in repository mono.
at ccb8e7c (tag)
tagging bd14d30250f601da904cb8c5d728fb59b766ff71 (commit)
replaces debian/2.10.8.1-8
tagged by Jo Shields
on Thu Mar 19 12:05:55 2015 +0000
- Log -----------------------------------------------------------------
mono Debian release 2.10.8.1-8+deb7u1
Jo Shields (4):
Mono's implementation of the SSL/TLS stack failed to check the order of the handshake messages. Which would allow various attacks on the protocol to succeed. ("SKIP-TLS" attack). (Closes: #780751, CVE-2015-2318)
Remove the client-side SSLv2 fallback. There's almost no SSLv3 web site left so a v2 fallback is only extra code we do not need to carry forward. (Closes: #780751, CVE-2015-2320)
Remove the EXPORT ciphers and related code path. That was still useful in 2003/2004 but the technical and legal landscape changed a lot since then. Removing the old, limited key size, cipher suites also allow removed additional parts of the code that deals with them. ("FREAK" attack) (Closes: #780751, CVE-2015-2319)
finalize changelog
-----------------------------------------------------------------------
No new revisions were added by this update.
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-mono/packages/mono.git
More information about the Pkg-mono-svn-commits
mailing list