On Wed, 5 Mar 2014 11:29:23 +0000 "Patrick O'Callaghan" <pocallaghan@xxxxxxxxx> wrote: > On Wed, Mar 5, 2014 at 10:28 AM, Ed Greshko <ed.greshko@xxxxxxxxxxx> wrote: > > On 03/05/14 18:21, Patrick O'Callaghan wrote: > >> On Wed, Mar 5, 2014 at 1:26 AM, Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> wrote: > >>> https://admin.fedoraproject.org/updates/FEDORA-2014-3413/gnutls-3.1.20-4.fc20 > >>> https://admin.fedoraproject.org/updates/FEDORA-2014-3363/gnutls-3.1.20-4.fc19 > >>> > >>> These need testing and karma. > >> AFAIK 3.1.20 is not the bugfixed version. It needs to be 3.2.12, which > >> is still only available for F21. > >> > >> poc > > > > So, you're saying the comments in those links are inaccurate? > > I'm just wondering why the version numbers don't correspond to those > in the GnuTLS advisory: > > http://www.gnutls.org/security.html#GNUTLS-SA-2014-2 Most likely because the patch has been applied, as the maintainer didn't want to do a version bump on a core package. -- Susi Lehtola Fedora Project Contributor jussilehtola@xxxxxxxxxxxxxxxxx -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
