[Secure-testing-team] Bug#698545: Basic constraints vulnerability

[Joachim Breitner]

Source: haskell-tls-extra
Severity: grave
Tags: security upstream

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

someone reported a security problem against tls-extra:
https://github.com/vincenthz/hs-tls/issues/29

The author is contacted to see if he can backport the fix to 0.4.6:
http://www.haskell.org/pipermail/haskell-cafe/2013-January/105844.html

Greetings,
Joachim


- -- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.5-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlD7wQ4ACgkQ9ijrk0dDIGwLugCfSoF8gvqqea3km2mWK2FdWTy7
eB4An3Rs75tpgdG64yKnNq2S49vh3RCn
=DIgk
-----END PGP SIGNATURE-----