[gentoo-commits] gentoo-x86 commit in net-libs/gnutls/files: gnutls-2.2.5-CVE-2008-4989-V2.patch

[Daniel Black (dragonheart)]

dragonheart    08/11/18 11:54:22

  Added:                gnutls-2.2.5-CVE-2008-4989-V2.patch
  Log:
  fixed cve patch as per bug #246976 - thanks parafin
  (Portage version: 2.2_rc14/cvs/Linux 2.6.25-gentoo-r7 x86_64)

Revision  Changes    Path
1.1                  net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989-V2.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989-V2.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989-V2.patch?rev=1.1&content-type=text/plain

Index: gnutls-2.2.5-CVE-2008-4989-V2.patch
===================================================================
--- gnutls-2.4.1/lib/x509/verify.c.orig	2008-07-01 06:45:51.000000000 +1000
+++ gnutls-2.4.1/lib/x509/verify.c	2008-11-07 16:48:08.000000000 +1100
@@ -414,17 +425,6 @@
     }
 #endif
 
-  /* Check if the last certificate in the path is self signed.
-   * In that case ignore it (a certificate is trusted only if it
-   * leads to a trusted party by us, not the server's).
-   */
-  if (gnutls_x509_crt_check_issuer (certificate_list[clist_size - 1],
-				    certificate_list[clist_size - 1]) > 0
-      && clist_size > 0)
-    {
-      clist_size--;
-    }
-
   /* Verify the certificate path (chain) 
    */
   for (i = clist_size - 1; i > 0; i--)