~ubuntu-branches/ubuntu/intrepid/gnutls26/intrepid-proposed : changes

~ubuntu-branches/ubuntu/intrepid/gnutls26/intrepid-proposed » Changes from revision 9

From Revision 9

Rev	Summary	Authors	Tags	Date
9	* Fix for certificate chain regressions introduced by fixes ... * Fix for certificate chain regressions introduced by fixes for CVE-2008-4989 * debian/patches/20_CVE-2008-4989.diff: updated to upstream's final 2.4.2 - 2.4.3 patchset for lib/x509/verify.c to fix CVE-2008-4989 and address all known regressions. To summarize from upstream: - Fix X.509 certificate chain validation error (CVE-2008-4989) - Fix chain verification for chains that end with RSA-MD2 CAs (LP: #305264) - Deprecate X.509 validation chains using MD5 and MD2 signatures - Accept chains where intermediary certs are trusted (LP: #305264)	Jamie Strandboge	2.4.1-1ubuntu0.3	15 years ago
8	* Fix for regression where some valid certificate chains wou... * Fix for regression where some valid certificate chains would be untrusted - Update debian/patches/20_CVE-2008-4989.diff to check if last certificate is self-signed and prevent verifying self-signed certificates against themselves. Patch from upstream. - http://lists.gnu.org/archive/html/gnutls-devel/2008-12/msg00008.html - LP: #305264	Jamie Strandboge	2.4.1-1ubuntu0.2	15 years ago
7	* SECURITY UPDATE: Fix for man-in-the-middle attack in certi... * SECURITY UPDATE: Fix for man-in-the-middle attack in certificate validation - debian/patches/20_CVE-2008-4989.diff: don't remove the last certificate if it is self-signed in lib/x509/verify.c - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215 - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3248 - CVE-2008-4989	Jamie Strandboge	2.4.1-1ubuntu0.1	15 years ago
6	Rebuild against thread-enabled guile-1.8. Rebuild against thread-enabled guile-1.8.	Martin Pitt	2.4.1-1build1	15 years ago
5	New upstream version, fixing a local denial of service vulne... New upstream version, fixing a local denial of service vulnerability only present in >= 2.3.5. GNUTLS-SA-2008-2 CVE-2008-2377	Andreas Metzler	2.4.1-1	15 years ago
4	* Standards version 3.8.0. Rename README.source_and_patches ... * Standards version 3.8.0. Rename README.source_and_patches to README.source. * Upload to unstable. * Point watchfile to stable releases again. * Merge experimental and unstable changelog.	Andreas Metzler	2.4.0-2	15 years ago
3	New upstream version. New upstream version. Fixes three security vulnerabilities. [GNUTLS-SA-2008-1-1] [GNUTLS-SA-2008-1-2] [GNUTLS-SA-2008-1-3]. See <http://www.gnu.org/software/gnutls/security.html>. CVE-2008-1948, CVE-2008-1949, CVE-2008-1950. DSA-1581-1	Andreas Metzler	2.2.5-1	15 years ago
2	* New upstream version. Release candidate for 2.2.3. * New upstream version. Release candidate for 2.2.3. + Increase default handshake packet size limit to 48kb. Closes: #478191 * remove unsupported .l command from debian/libgnutls-config.1 * Use Programming/C as doc-base section.	Andreas Metzler	2.2.3~rc-1	15 years ago
1	Import upstream version 2.2.3~rc Import upstream version 2.2.3~rc	Andreas Metzler	upstream-2.2.3~rc	15 years ago