~ubuntu-branches/ubuntu/gutsy/gnutls13/gutsy-updates : changes

~ubuntu-branches/ubuntu/gutsy/gnutls13/gutsy-updates » Changes from revision 12

From Revision 12

Rev	Summary	Authors	Tags	Date
12	* Fix for regression where some valid certificate chains wou... * Fix for regression where some valid certificate chains would be untrusted - Update debian/patches/91_CVE-2008-4989.diff to check if last certificate is self-signed and prevent verifying self-signed certificates against themselves. Patch from upstream. - http://lists.gnu.org/archive/html/gnutls-devel/2008-12/msg00008.html - LP: #305264	Jamie Strandboge	1.6.3-1ubuntu0.3	15 years ago
11	* SECURITY UPDATE: Fix for man-in-the-middle attack in certi... * SECURITY UPDATE: Fix for man-in-the-middle attack in certificate validation - debian/patches/91_CVE-2008-4989.diff: don't remove the last certificate if it is self-signed in lib/x509/verify.c - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215 - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3248 - CVE-2008-4989	Jamie Strandboge	1.6.3-1ubuntu0.2	15 years ago
10	* SECURITY UPDATE: multiple remote denial of service. * SECURITY UPDATE: multiple remote denial of service. * debian/patches/90_GNUTLS-SA-2008-1.diff: upstream fixes, thanks to Debian. * References GNUTLS-SA-2008-1 CVE-2008-1948, CVE-2008-1949, CVE-2008-1950	Kees Cook	1.6.3-1ubuntu0.1	15 years ago
9	Trigger rebuild for hppa. Trigger rebuild for hppa.	LaMont Jones	1.6.3-1build1	16 years ago
8	* New upstream version, pulling selected fixes and features ... * New upstream version, pulling selected fixes and features from 1.7.x. * Bump shlibs.	Andreas Metzler	1.6.3-1	16 years ago
7	Switch to liblzo2. (Thanks, Peter Eisentraut) (Closes: #4233... Switch to liblzo2. (Thanks, Peter Eisentraut) (Closes: #423332)	Andreas Metzler	1.6.2-2	17 years ago
6	* New upstream version * New upstream version - Really Closes: #403887 libgnutls failes to parse OpenSSL generated certificates, since it contains a regenerated pkix_asn1_tab.c. - Ship German translation. Closes: #392857	Andreas Metzler	1.6.2-1	17 years ago
5	Rebuild for changes in the amd64 toolchain. Rebuild for changes in the amd64 toolchain.	Matthias Klose	1.4.4-3build1	17 years ago
4	Pulled /patches/18_negotiate_cypher.diff from 1.4.5: Pulled /patches/18_negotiate_cypher.diff from 1.4.5: When a GnuTLS server receive a SSLv2 Client Hello for an unknown TLS version, try to negotiate the highest version support by the GnuTLS server, instead of the lowest.	Andreas Metzler	1.4.4-3	17 years ago
3	* SECURITY UPDATE: Signature forgery. * SECURITY UPDATE: Signature forgery. * Add debian/patches/00CVS_CVE-2006-4790.patch: - Check excessive data in padding of PKCS #1 v1.5 signatures to prevent applications from incorrectly verifying the certificate. (Similar to recent OpenSSL update.) - Patch taken from upstream CVS: http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001212.html - CVE-2006-4790	Martin Pitt	1.4.0-3ubuntu1	17 years ago
2	[ Andreas Metzler ] [ Andreas Metzler ] * Strip "libgnutls-config --libs"' output to only list stuff required for dynamic linking. (Closes: #375815). Document this in "libgnutls-dev's README.Debian. * Pull patches/16_libs.private_gnutls.diff and debian/patches/16_libs.private_gnutls-extra.diff from upstream to make pkg-config usable for static linking.	Andreas Metzler	1.4.0-3	17 years ago
1	Import upstream version 1.4.0 Import upstream version 1.4.0	Andreas Metzler	upstream-1.4.0	17 years ago