Changeset 82cb66b in mod_gnutls

Timestamp:

Feb 23, 2023, 1:32:13 PM (4 weeks ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

main, master

Children:

17b2836

Parents:

b2b3700

git-author:

Fiona Klute <fiona.klute@…> (02/23/23 13:31:31)

git-committer:

Fiona Klute <fiona.klute@…> (02/23/23 13:32:13)

Message:

mod_gnutls version 0.12.1

Files:

• CHANGELOG (modified) (1 diff)
• configure.ac (modified) (1 diff)

CHANGELOG

@@ +1 @@
+** Version 0.12.1 (2023-02-23)
+
+- Security fix: Remove an infinite loop in blocking read on transport
+  timeout. Mod_gnutls versions from 0.9.0 to 0.12.0 (including) did
+  not properly fail blocking read operations on TLS connections when
+  the transport hit timeouts. Instead it entered an endless loop
+  retrying the read operation, consuming CPU resources. This could be
+  exploited for denial of service attacks. If trace level logging was
+  enabled, it would also produce an excessive amount of log output
+  during the loop, consuming disk space.
+
+- Replace obsolete Autoconf macros. Generating ./configure now
+  requires Autoconf 2.69 (present in Debian Bullseye).
+
 ** Version 0.12.0 (2021-08-14)
 

configure.ac

@@ -1 +1 @@
 AC_PREREQ([2.69])
-AC_INIT([mod_gnutls],[0.12.0])
+AC_INIT([mod_gnutls],[0.12.1])
 OOO_CONFIG_NICE(config.nice)
 MOD_GNUTLS_VERSION=AC_PACKAGE_VERSION