Ubuntu
liblwp-protocol-https-perl package

liblwp-protocol-https-perl 6.04-2ubuntu0.1 source package in Ubuntu

Changelog

liblwp-protocol-https-perl (6.04-2ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect peer cert verification
    - debian/patches/746579-fix-peer-certificate-verification.patch: don't
      completely disable cert verification if only hostname verification is
      disabled in lib/LWP/Protocol/https.pm.
    - CVE-2014-3230
  * debian/patches/fix-https-proxy: updated to work with security fix.
  * debian/patches/cert.patch: refreshed
 -- Marc Deslauriers <email address hidden>   Fri, 27 Jun 2014 16:23:46 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
perl
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates main perl
Trusty security main perl

Builds

Trusty: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
liblwp-protocol-https-perl_6.04.orig.tar.gz 3.9 KiB 1ef67750ee363525cf729b59afde805ac4dc80eaf8d36ca01082a4d78a7af629
liblwp-protocol-https-perl_6.04-2ubuntu0.1.debian.tar.gz 7.6 KiB d171a0453d4f38c8fc9475c77d5eb0701c33212cbaff76f95d96f095d09ea2cc
liblwp-protocol-https-perl_6.04-2ubuntu0.1.dsc 2.3 KiB 41d988dfc9ed1f5d3437ec6e9f1687ce4a8a3e4411b4bc303f470d7ed2e3c374

View changes file

Binary packages built by this source

liblwp-protocol-https-perl: HTTPS driver for LWP::UserAgent

 The LWP::Protocol::https module provides support for using HTTPS schemed URLs
 with LWP. LWP::Protocol::https is a plug-in to the LWP protocol handling, so
 you don't use it directly. Once the module is installed LWP is able to access
 sites using HTTP over SSL/TLS.
 .
 If hostname verification is requested by LWP::UserAgent's ssl_opts, and
 neither SSL_ca_file nor SSL_ca_path is set, then SSL_ca_file is implied to be
 the one provided by ca-certificates.
 .
 This module used to be bundled with libwww-perl, but it was unbundled in
 v6.02 in order to be able to declare its dependencies properly for the CPAN
 tool-chain. Applications that need HTTPS support can just declare their
 dependency on LWP::Protocol::https and will no longer need to know what
 underlying modules to install.