~ubuntu-branches/ubuntu/karmic/gnutls26/karmic : changes

~ubuntu-branches/ubuntu/karmic/gnutls26/karmic » Changes from revision 17

From Revision 17

Rev	Summary	Authors	Tags	Date
17	[ debian/patches/15_openpgp.diff ] The CVE-2009-2730 patch b... [ debian/patches/15_openpgp.diff ] The CVE-2009-2730 patch broke openpgp connections.	Andreas Metzler	2.8.3-2	14 years ago
16	* New upstream version. * New upstream version. + Stops hardcoding a hard dependency on the versions of gcrypt and tasn it was built against. Closes: #540449 + Fixes CVE-2009-2730, a vulnerability related to NUL bytes in X.509 certificate name fields. Closes: #541439 GNUTLS-SA-2009-4 http://lists.gnu.org/archive/html/help-gnutls/2009-08/msg00011.html * Drop 15_chainverify_expiredcert.diff, included upstream. * Urgency high, since 541439 applies to testing, too.	Andreas Metzler	2.8.3-1	14 years ago
15	* SECURITY UPDATE: fix improper handling of '\0' in Common N... * SECURITY UPDATE: fix improper handling of '\0' in Common Name (CN) and Subject Alternative Name (SAN) in X.509 certificates (LP: #413136) - debian/patches/16_CVE-2009-2730.diff: verify length of CN and SAN are what we expect and error out if either contains an embedded \0 - CVE-2009-2730	Jamie Strandboge	2.6.6-1ubuntu1	14 years ago
14	* use @LTLIBTASN1@ instead of @LIBTASN1@ in Libs.private of ... * use @LTLIBTASN1@ instead of @LIBTASN1@ in Libs.private of .pc.in. This way lib-link.m4 gives us -ltasn1 instead of /usr/lib/libtasn1.so. New upstream security release. + libgnutls: Corrected double free on signature verification failure. GNUTLS-SA-2009-1 CVE-2009-1415 + libgnutls: Fix DSA key generation. Noticed when investigating the previous GNUTLS-SA-2009-1 problem. All DSA keys generated using GnuTLS 2.6.x are corrupt. See the advisory for more details. GNUTLS-SA-2009-2 CVE-2009-1416 + libgnutls: Check expiration/activation time on untrusted certificates. Before the library did not check activation/expiration times on certificates, and was documented as not doing so. GNUTLS-SA-2009-3 CVE-2009-1417 * The former two issues only apply to gnutls 2.6.x. The latter is a brehavior change, add a NEWS.Debian file to document it.	Andreas Metzler	2.6.6-1	14 years ago
13	* Sync sections in debian/control with override file. libgnu... * Sync sections in debian/control with override file. libgnutls26-dbg is section debug, guile-gnutls is section lisp. * New upstream version. (Needed for Libtasn1-3 2.0) * New patch 15_tasn1inpc.diff. Make sure libtasn1 is listed in Libs.private. * Standards-Version: 3.8.1, no changes required.	Andreas Metzler	2.6.5-1	15 years ago
12	* New patches, syncing with 2.4.3 upstream oldstable release... * New patches, syncing with 2.4.3 upstream oldstable release: + 24_intermedcertificate.patch If a non-root certificate ist trusted gnutls certificateificate verification stops there instead of checking up to the root of the certificate chain. + 22_whitespace.patch - Whitespace only changes, to make it possible to apply upstream fixes without manual changes. + 25_bufferoverrun.patch. Fix buffer overrun bug in gnutls_x509_crt_list_import. http://news.gmane.org/find-root.php?message_id=%3c000001c91d6e%2463059c90%242910d5b0%24%40com%3e	Andreas Metzler	2.4.2-6	15 years ago
11	* Pull two patches from upstream stable branch to make gnutl... * Pull two patches from upstream stable branch to make gnutls behavior match documentation: + patch 23_permit_v1_CA.diff:Accept v1 x509 CA certs if GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT and/or GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT were supplied. Closes: #509593 + 22_deprecate_md2_md5_x509_validation.diff: Verifying untrusted X.509 certificates signed with RSA-MD2 or RSA-MD5 will now fail with a GNUTLS_CERT_INSECURE_ALGORITHM verification output.	Andreas Metzler	2.4.2-5	15 years ago
10	* Add Simon Josefsson to uploaders. * Add Simon Josefsson to uploaders. * Another fix for the verification fix. Some correct certificate chains were not recognized as verified. Closes: #507633	Andreas Metzler	2.4.2-4	15 years ago
9	Fix a crash on trying to verify self-signed certificates int... Fix a crash on trying to verify self-signed certificates introduced by the patch for CVE-2008-4989. Closes: #505279	Andreas Metzler	2.4.2-3	15 years ago
8	[CVE-2008-4989.diff] Fix man in the middle attack for certif... [CVE-2008-4989.diff] Fix man in the middle attack for certificate verification. CVE-2008-4989 GNUTLS-SA-2008-3	Andreas Metzler	2.4.2-2	15 years ago
7	* New upstream bugfix release. * New upstream bugfix release. * Up to date gnutls-cli manpage. Closes: #492775	Andreas Metzler	2.4.2-1	15 years ago
6	Rebuild against thread-enabled guile-1.8. Rebuild against thread-enabled guile-1.8.	Martin Pitt	2.4.1-1build1	15 years ago
5	New upstream version, fixing a local denial of service vulne... New upstream version, fixing a local denial of service vulnerability only present in >= 2.3.5. GNUTLS-SA-2008-2 CVE-2008-2377	Andreas Metzler	2.4.1-1	15 years ago
4	* Standards version 3.8.0. Rename README.source_and_patches ... * Standards version 3.8.0. Rename README.source_and_patches to README.source. * Upload to unstable. * Point watchfile to stable releases again. * Merge experimental and unstable changelog.	Andreas Metzler	2.4.0-2	15 years ago
3	New upstream version. New upstream version. Fixes three security vulnerabilities. [GNUTLS-SA-2008-1-1] [GNUTLS-SA-2008-1-2] [GNUTLS-SA-2008-1-3]. See <http://www.gnu.org/software/gnutls/security.html>. CVE-2008-1948, CVE-2008-1949, CVE-2008-1950. DSA-1581-1	Andreas Metzler	2.2.5-1	15 years ago
2	* New upstream version. Release candidate for 2.2.3. * New upstream version. Release candidate for 2.2.3. + Increase default handshake packet size limit to 48kb. Closes: #478191 * remove unsupported .l command from debian/libgnutls-config.1 * Use Programming/C as doc-base section.	Andreas Metzler	2.2.3~rc-1	15 years ago
1	Import upstream version 2.2.3~rc Import upstream version 2.2.3~rc	Andreas Metzler	upstream-2.2.3~rc	15 years ago