Comment 22 for bug 1111882

I've changed the status for APT back to "Confirmed" - I've seen many cases of this bug reported. I don't follow the comment about legal reasons (#17). Ubuntu already ships apt-transport-https, which links against gnutls and suffers from this bug; no new code causing any new legal issues would be pulled in. Fixing this bug in gnutls would also fix it in apt-transport-https, so IMO, APT is affected by this bug just the same as git and curl.