~ubuntu-branches/ubuntu/natty/gnutls26/natty : changes

~ubuntu-branches/ubuntu/natty/gnutls26/natty » Changes from revision 25

From Revision 25 to 6

Rev	Summary	Authors	Tags	Date
25	run update-maintainer run update-maintainer	Steve Langasek	2.8.6-1ubuntu2	13 years ago
24	releasing version 2.8.6-1ubuntu2 releasing version 2.8.6-1ubuntu2	Steve Langasek		13 years ago
23	FFe LP: #733501: Build for multiarch. FFe LP: #733501: Build for multiarch.	Steve Langasek		13 years ago
22	Fix build failure with --no-add-needed. Fix build failure with --no-add-needed.	Matthias Klose	2.8.6-1ubuntu1	13 years ago
21	* Use dh_lintian. * Use dh_lintian. * Use dh_makeshlibs for the guile stuff, too. This gets us a) ldconfig in postinst. Closes: #553109 and b) a shlibs file. However the shared objects /usr/lib/libguile-gnutlsso are still not designed to be used as libraries (linking) but are dlopened. guile-1.10 will address this issue by keeping this stuff in a private directory. * hotfix pkg-config files (proper fix to be included upstream). * Stop unneeeded linkage against libgpg-error. 16_unnecessarydep.diff	Andreas Metzler	2.8.6-1	14 years ago
20	Add a huge bunch of lintian overrides for the guile stuff to... Add a huge bunch of lintian overrides for the guile stuff to make dak happy.	Andreas Metzler	2.8.5-2	14 years ago
19	[20_fixtimebomb.diff] Fix testsuite error. Closes: #552920 [20_fixtimebomb.diff] Fix testsuite error. Closes: #552920	Andreas Metzler	2.8.4-2	14 years ago
18	* New upstream version. * New upstream version. + Drop debian/patches/15_openpgp.diff. * Sync priorities with override file, libgnutls26 has been bumped from important to standard.	Andreas Metzler	2.8.4-1	14 years ago
17	[ debian/patches/15_openpgp.diff ] The CVE-2009-2730 patch b... [ debian/patches/15_openpgp.diff ] The CVE-2009-2730 patch broke openpgp connections.	Andreas Metzler	2.8.3-2	14 years ago
16	* New upstream version. * New upstream version. + Stops hardcoding a hard dependency on the versions of gcrypt and tasn it was built against. Closes: #540449 + Fixes CVE-2009-2730, a vulnerability related to NUL bytes in X.509 certificate name fields. Closes: #541439 GNUTLS-SA-2009-4 http://lists.gnu.org/archive/html/help-gnutls/2009-08/msg00011.html * Drop 15_chainverify_expiredcert.diff, included upstream. * Urgency high, since 541439 applies to testing, too.	Andreas Metzler	2.8.3-1	14 years ago
15	* SECURITY UPDATE: fix improper handling of '\0' in Common N... * SECURITY UPDATE: fix improper handling of '\0' in Common Name (CN) and Subject Alternative Name (SAN) in X.509 certificates (LP: #413136) - debian/patches/16_CVE-2009-2730.diff: verify length of CN and SAN are what we expect and error out if either contains an embedded \0 - CVE-2009-2730	Jamie Strandboge	2.6.6-1ubuntu1	14 years ago
14	* use @LTLIBTASN1@ instead of @LIBTASN1@ in Libs.private of ... * use @LTLIBTASN1@ instead of @LIBTASN1@ in Libs.private of .pc.in. This way lib-link.m4 gives us -ltasn1 instead of /usr/lib/libtasn1.so. New upstream security release. + libgnutls: Corrected double free on signature verification failure. GNUTLS-SA-2009-1 CVE-2009-1415 + libgnutls: Fix DSA key generation. Noticed when investigating the previous GNUTLS-SA-2009-1 problem. All DSA keys generated using GnuTLS 2.6.x are corrupt. See the advisory for more details. GNUTLS-SA-2009-2 CVE-2009-1416 + libgnutls: Check expiration/activation time on untrusted certificates. Before the library did not check activation/expiration times on certificates, and was documented as not doing so. GNUTLS-SA-2009-3 CVE-2009-1417 * The former two issues only apply to gnutls 2.6.x. The latter is a brehavior change, add a NEWS.Debian file to document it.	Andreas Metzler	2.6.6-1	14 years ago
13	* Sync sections in debian/control with override file. libgnu... * Sync sections in debian/control with override file. libgnutls26-dbg is section debug, guile-gnutls is section lisp. * New upstream version. (Needed for Libtasn1-3 2.0) * New patch 15_tasn1inpc.diff. Make sure libtasn1 is listed in Libs.private. * Standards-Version: 3.8.1, no changes required.	Andreas Metzler	2.6.5-1	15 years ago
12	* New patches, syncing with 2.4.3 upstream oldstable release... * New patches, syncing with 2.4.3 upstream oldstable release: + 24_intermedcertificate.patch If a non-root certificate ist trusted gnutls certificateificate verification stops there instead of checking up to the root of the certificate chain. + 22_whitespace.patch - Whitespace only changes, to make it possible to apply upstream fixes without manual changes. + 25_bufferoverrun.patch. Fix buffer overrun bug in gnutls_x509_crt_list_import. http://news.gmane.org/find-root.php?message_id=%3c000001c91d6e%2463059c90%242910d5b0%24%40com%3e	Andreas Metzler	2.4.2-6	15 years ago
11	* Pull two patches from upstream stable branch to make gnutl... * Pull two patches from upstream stable branch to make gnutls behavior match documentation: + patch 23_permit_v1_CA.diff:Accept v1 x509 CA certs if GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT and/or GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT were supplied. Closes: #509593 + 22_deprecate_md2_md5_x509_validation.diff: Verifying untrusted X.509 certificates signed with RSA-MD2 or RSA-MD5 will now fail with a GNUTLS_CERT_INSECURE_ALGORITHM verification output.	Andreas Metzler	2.4.2-5	15 years ago
10	* Add Simon Josefsson to uploaders. * Add Simon Josefsson to uploaders. * Another fix for the verification fix. Some correct certificate chains were not recognized as verified. Closes: #507633	Andreas Metzler	2.4.2-4	15 years ago
9	Fix a crash on trying to verify self-signed certificates int... Fix a crash on trying to verify self-signed certificates introduced by the patch for CVE-2008-4989. Closes: #505279	Andreas Metzler	2.4.2-3	15 years ago
8	[CVE-2008-4989.diff] Fix man in the middle attack for certif... [CVE-2008-4989.diff] Fix man in the middle attack for certificate verification. CVE-2008-4989 GNUTLS-SA-2008-3	Andreas Metzler	2.4.2-2	15 years ago
7	* New upstream bugfix release. * New upstream bugfix release. * Up to date gnutls-cli manpage. Closes: #492775	Andreas Metzler	2.4.2-1	15 years ago
6	Rebuild against thread-enabled guile-1.8. Rebuild against thread-enabled guile-1.8.	Martin Pitt	2.4.1-1build1	15 years ago

Older »