In v0.8 we fixed an error that arose when the key obtained via X509_get_X509_PUBKEY was freed independently of the X509 certificate though it in deed is part of the cert. The error was found in networking.c. At the same time the author grepped for other usages of the X509_get_X509_PUBKEY function in all other files. It is a miracle why grep did not return any result at that time. Consequently the same error remained unfixed in dane-unbound.c and dane-direct.c. I had been a bit in wonder that this was the only point where the function was used but I did trust in the result of grep. For now I had discovered the error simply by reading the sources. Make sure you do not use any version before 0.8.4 without manually adding this fix because it is a severe security issue. It may crash a̅tea when a TLSA record contains a full cert or pubkey rather than a hash of it (which will be hardly used in practice though the TLSA response could be spoofed to pretend this)!
El 2 de septiembre, el Tribunal de Justicia de la Unión Europea pronunció una resolución revolucionaria: La justicia paralela del ECT (Tratado de la Carta de la Energía) es ilegal. Está frenando el cambio a las energías renovables, por ejemplo requirindo los Países Bajos a pagar miles de millones en compensación a las empresas de carbón UNIPER y RWE e intimidando a los gobiernos de toda Europa. Italia ya se ha retirado. Francia, España, Polonia, Grecia y Eslovenia están pidiendo que toda la UE salga o quieren salir ellos mismos. Desafortunadamente, la sentencia aún no es legalmente vinculante. No se esperan juicios correspondientes hasta 2022. Más de un millón de personas ya han firmado la petición de nuestro enlace contra el TCE.
Em 2 de setembro, o Tribunal de Justiça da União Europeia pronunciou uma sentença revolucionaria: A justiça paralela do ECT (Tratado da Carta da Energia) é ilegal. Está retardando a mudança para as energias renováveis, por exemplo por requerer Holanda a pagar bilhões em compensação para as empresas de carvão UNIPER e RWE, intimidando governos em toda a Europa. A Itália já retirou-se. França, Espanha, Polónia, Grécia e Eslovénia apelam a toda a UE de sair ou querem sair eles próprios. Infelizmente, o julgamento ainda não é juridicamente vinculativo. Os julgamentos correspondentes não são esperados até 2022. Mais de um milhão de pessoas já assinaram a petição do nosso link contra a ECT.
On September 2nd, the Court of Justice of the European Union passed a groundbreaking judgment: The parallel justice of the ECT (Energy Charter Treaty) is illegal. It is thwarting the switch to renewables, for example by requiring the Netherlands to pay billions in compensation to the coal companies UNIPER and RWE and by intimidating governments across Europe. Italy has already left the contract. France, Spain, Poland, Greece and Slovenia are calling for the entire EU to exit or want to exit themselves. Unfortunately, the ruling from September is not yet legally binding. Corresponding judgments are expected not before 2022. Over a million people have already signed the petition against the ECT which we have linked.
