security regression: SSL CN check breaks IRC proxy

[Steve Langasek]

Binary package hint: irssi

The latest security update for irssi breaks the use of SSL with proxies, because irssi tries to check the SSL cert's CN against the server name instead of against the proxy hostname.

[Steve Langasek (vorlon)]

Here's a debdiff to fix this. Have uploaded to lucid, waiting in the unapproved queue there.

[Launchpad Janitor (janitor)]

This bug was fixed in the package irssi - 0.8.14-1ubuntu4

---------------
irssi (0.8.14-1ubuntu4) lucid; urgency=low

  * 91_ssl_proxy.patch: when we have a proxy setting, we expect the CN to
    match the proxy hostname, not the server hostname. LP: #565182
 -- Steve Langasek <email address hidden> Sat, 17 Apr 2010 04:18:10 +0000

[Jamie Strandboge (jdstrand)]

Thanks, Steve. I've forwarded the patch upstream and will roll this out to stable releases on Monday.

[Launchpad Janitor (janitor)]

This bug was fixed in the package irssi - 0.8.14-1ubuntu1.2

---------------
irssi (0.8.14-1ubuntu1.2) karmic-security; urgency=low

  * debian/patches/91_ssl_proxy.patch: when we have a proxy setting, we expect
    the CN to match the proxy hostname, not the server hostname. Patch thanks
    to Steve Langasek. (LP: #565182)
 -- Jamie Strandboge <email address hidden> Mon, 19 Apr 2010 12:57:24 -0500

[Launchpad Janitor (janitor)]

This bug was fixed in the package irssi - 0.8.12-6ubuntu1.3

---------------
irssi (0.8.12-6ubuntu1.3) jaunty-security; urgency=low

  * debian/patches/91_ssl_proxy.patch: when we have a proxy setting, we expect
    the CN to match the proxy hostname, not the server hostname. Patch thanks
    to Steve Langasek. (LP: #565182)
 -- Jamie Strandboge <email address hidden> Mon, 19 Apr 2010 13:01:12 -0500

[Launchpad Janitor (janitor)]

This bug was fixed in the package irssi - 0.8.12-4ubuntu2.3

---------------
irssi (0.8.12-4ubuntu2.3) intrepid-security; urgency=low

  * debian/patches/91_ssl_proxy.patch: when we have a proxy setting, we expect
    the CN to match the proxy hostname, not the server hostname. Patch thanks
    to Steve Langasek. (LP: #565182)
 -- Jamie Strandboge <email address hidden> Mon, 19 Apr 2010 13:02:15 -0500

[Launchpad Janitor (janitor)]

This bug was fixed in the package irssi - 0.8.12-3ubuntu3.3

---------------
irssi (0.8.12-3ubuntu3.3) hardy-security; urgency=low

  * debian/patches/92_ssl_proxy.patch: when we have a proxy setting, we expect
    the CN to match the proxy hostname, not the server hostname. Patch thanks
    to Steve Langasek. (LP: #565182)
 -- Jamie Strandboge <email address hidden> Mon, 19 Apr 2010 13:03:33 -0500