~ubuntu-branches/ubuntu/lucid/gnutls26/lucid-security

• Changes
• Files

~ubuntu-branches/ubuntu/lucid/gnutls26/lucid-security » Changes from revision 26

From Revision 26 to 7

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
26		* SECURITY UPDATE: signature forgery issue * SECURITY UPDATE: signature forgery issue   - debian/patches/CVE-2015-0282.patch: make sure the signature     algorithms match in lib/gnutls_algorithms.c, lib/gnutls_algorithms.h,     lib/x509/privkey.c, lib/x509/verify.c, lib/x509/x509.c,     lib/x509/x509_int.h.   - CVE-2015-0282 * SECURITY UPDATE: certificate algorithm consistency issue   - debian/patches/CVE-2015-0294.patch: make sure the two signature     algorithms match on cert import in lib/x509/x509.c.   - CVE-2015-0294 * SECURITY UPDATE: missing date/time checks on CA certificates   - debian/patches/CVE-2014-8155.patch: perform time verification on     trusted certificate list in lib/includes/gnutls/x509.h,     lib/x509/verify.c.   - CVE-2014-8155	Marc Deslauriers	2.8.5-2ubuntu0.7	9 years ago
25		* SECURITY UPDATE: memory corruption due to server hello par... * SECURITY UPDATE: memory corruption due to server hello parsing   - debian/patches/CVE-2014-3466.patch: validate session_id_len in     lib/gnutls_handshake.c.   - CVE-2014-3466	Marc Deslauriers	2.8.5-2ubuntu0.6	9 years ago
24		* SECURITY UPDATE: certificate validation bypass * SECURITY UPDATE: certificate validation bypass   - debian/patches/CVE-2014-0092.patch: correct return codes in     lib/x509/verify.c.   - CVE-2014-0092	Marc Deslauriers	2.8.5-2ubuntu0.5	10 years ago
23		* SECURITY UPDATE: denial of service via incorrect pad * SECURITY UPDATE: denial of service via incorrect pad   - debian/patches/CVE-2013-2116.patch: added sanity check in     lib/gnutls_cipher.c.   - CVE-2013-2116	Marc Deslauriers	2.8.5-2ubuntu0.4	10 years ago
22		* SECURITY UPDATE: "Lucky Thirteen" timing side-channel TLS ... * SECURITY UPDATE: "Lucky Thirteen" timing side-channel TLS attack   - debian/patches/CVE-2013-1619.patch: avoid timing attacks in     lib/gnutls_cipher.c, lib/gnutls_hash_int.h.   - CVE-2013-1619	Marc Deslauriers	2.8.5-2ubuntu0.3	11 years ago
21		* SECURITY UPDATE: Denial of service in client application * SECURITY UPDATE: Denial of service in client application   - debian/patches/CVE-2011-4128.patch: Fix buffer bounds check when copying     session data. Based on upstream patch.   - CVE-2011-4128 * SECURITY UPDATE: Denial of service via crafted TLS record   - debian/patches/CVE-2012-1573.patch: Validate the size of a     GenericBlockCipher structure as it is processed. Based on upstream     patch.   - CVE-2012-1573	Tyler Hicks	2.8.5-2ubuntu0.1	12 years ago
20		Add a huge bunch of lintian overrides for the guile stuff to... Add a huge bunch of lintian overrides for the guile stuff to make dak happy.	Andreas Metzler	2.8.5-2	14 years ago
19		[20_fixtimebomb.diff] Fix testsuite error. Closes: #552920 [20_fixtimebomb.diff] Fix testsuite error. Closes: #552920	Andreas Metzler	2.8.4-2	14 years ago
18		* New upstream version. * New upstream version.   + Drop debian/patches/15_openpgp.diff. * Sync priorities with override file, libgnutls26 has been bumped from   important to standard.	Andreas Metzler	2.8.4-1	14 years ago
17		[ debian/patches/15_openpgp.diff ] The CVE-2009-2730 patch b... [ debian/patches/15_openpgp.diff ] The CVE-2009-2730 patch broke openpgp connections.	Andreas Metzler	2.8.3-2	14 years ago
16		* New upstream version. * New upstream version.   + Stops hardcoding a hard dependency on the versions of gcrypt and tasn it     was built against. Closes: #540449   + Fixes CVE-2009-2730, a vulnerability related to NUL bytes in X.509     certificate name fields. Closes: #541439        GNUTLS-SA-2009-4     http://lists.gnu.org/archive/html/help-gnutls/2009-08/msg00011.html * Drop 15_chainverify_expiredcert.diff, included upstream. * Urgency high, since 541439 applies to testing, too.	Andreas Metzler	2.8.3-1	14 years ago
15		* SECURITY UPDATE: fix improper handling of '\0' in Common N... * SECURITY UPDATE: fix improper handling of '\0' in Common Name (CN) and   Subject Alternative Name (SAN) in X.509 certificates (LP: #413136)   - debian/patches/16_CVE-2009-2730.diff: verify length of CN and SAN     are what we expect and error out if either contains an embedded \0   - CVE-2009-2730	Jamie Strandboge	2.6.6-1ubuntu1	14 years ago
14		* use @LTLIBTASN1@ instead of @LIBTASN1@ in Libs.private of ... * use @LTLIBTASN1@ instead of @LIBTASN1@ in Libs.private of *.pc.in. This   way lib-link.m4 gives us -ltasn1 instead of /usr/lib/libtasn1.so. * New upstream security release.   + libgnutls: Corrected double free on signature verification failure.     GNUTLS-SA-2009-1 CVE-2009-1415   + libgnutls: Fix DSA key generation. Noticed when investigating the     previous GNUTLS-SA-2009-1 problem. All DSA keys generated using GnuTLS     2.6.x are corrupt.  See the advisory for more details.     GNUTLS-SA-2009-2 CVE-2009-1416   + libgnutls: Check expiration/activation time on untrusted certificates.     Before the library did not check activation/expiration times on     certificates, and was documented as not doing so.     GNUTLS-SA-2009-3 CVE-2009-1417  * The former two issues only apply to gnutls 2.6.x. The latter is a    brehavior change, add a NEWS.Debian file to document it.	Andreas Metzler	2.6.6-1	14 years ago
13		* Sync sections in debian/control with override file. libgnu... * Sync sections in debian/control with override file. libgnutls26-dbg is   section debug, guile-gnutls is section lisp. * New upstream version. (Needed for Libtasn1-3 2.0) * New patch 15_tasn1inpc.diff. Make sure libtasn1 is listed in Libs.private. * Standards-Version: 3.8.1, no changes required.	Andreas Metzler	2.6.5-1	15 years ago
12		* New patches, syncing with 2.4.3 upstream oldstable release... * New patches, syncing with 2.4.3 upstream oldstable release:   + 24_intermedcertificate.patch If a non-root certificate ist trusted     gnutls certificateificate verification stops there instead of checking     up to the root of the certificate chain.   + 22_whitespace.patch - Whitespace only changes, to make it possible to     apply upstream fixes without manual changes.    + 25_bufferoverrun.patch. Fix buffer overrun bug in     gnutls_x509_crt_list_import.     http://news.gmane.org/find-root.php?message_id=%3c000001c91d6e%2463059c90%242910d5b0%24%40com%3e	Andreas Metzler	2.4.2-6	15 years ago
11		* Pull two patches from upstream stable branch to make gnutl... * Pull two patches from upstream stable branch to make gnutls behavior   match documentation:  + patch 23_permit_v1_CA.diff:Accept v1 x509 CA    certs if GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT and/or    GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT were supplied. Closes: #509593  + 22_deprecate_md2_md5_x509_validation.diff: Verifying untrusted X.509    certificates signed with RSA-MD2 or RSA-MD5 will now fail with a    GNUTLS_CERT_INSECURE_ALGORITHM verification output.	Andreas Metzler	2.4.2-5	15 years ago
10		* Add Simon Josefsson to uploaders. * Add Simon Josefsson to uploaders. * Another fix for the verification fix. Some correct certificate chains were   not recognized as verified. Closes: #507633	Andreas Metzler	2.4.2-4	15 years ago
9		Fix a crash on trying to verify self-signed certificates int... Fix a crash on trying to verify self-signed certificates introduced by the patch for CVE-2008-4989. Closes: #505279	Andreas Metzler	2.4.2-3	15 years ago
8		[CVE-2008-4989.diff] Fix man in the middle attack for certif... [CVE-2008-4989.diff] Fix man in the middle attack for certificate verification. CVE-2008-4989 GNUTLS-SA-2008-3	Andreas Metzler	2.4.2-2	15 years ago
7		* New upstream bugfix release. * New upstream bugfix release. * Up to date gnutls-cli manpage. Closes: #492775	Andreas Metzler	2.4.2-1	15 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1