defensive-coding update for F21

Nikos Mavrogiannopoulos nmav at redhat.com
Thu Nov 13 07:46:36 UTC 2014


On Wed, 2014-11-12 at 15:26 +0100, Florian Weimer wrote:
> On 10/13/2014 02:07 PM, Nikos Mavrogiannopoulos wrote:
> > -	switch to thread-safe algorithms.
> > +	switch to thread-safe algorithms. This does not apply to
> > +	libgnutls.so.28 shipped in Fedora 21, which does not link to
> > +	libpthread.
> 
> Thanks for the update.  Is there are reason why you use the soname here? 
>   Did this change happen with GNUTLS 3.3 as well?

Hi,
 That looks like a copy paste error. I don't think I wanted to write
libgnutls.so.28.

> I'll have to think about removing these remarks completely, or mark them 
> as historical in some way.

One the latest release in F21 (3.3.10) I've also addressed the remaining
point of allowing v1/v2 certificates with extensions.

regards,
Nikos




More information about the security mailing list