~ubuntu-branches/ubuntu/precise/gnutls26/precise-updates

• Changes
• Files

~ubuntu-branches/ubuntu/precise/gnutls26/precise-updates » Changes from revision 44

From Revision 44 to 25

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
44		debian/patches/compare_ca_name_and_key.patch: when comparing... debian/patches/compare_ca_name_and_key.patch: when comparing a CA certificate with the trusted list compare the name and key. This will allow the future removal of 1024-bit RSA keys from the ca-certificates package.	Marc Deslauriers	2.12.14-5ubuntu3.12	8 years ago
43		* SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2 * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2   - debian/patches/CVE-2015-7575.patch: do not consider any values from     the extension data to decide acceptable algorithms in     lib/ext_signature.c.   - CVE-2015-7575	Marc Deslauriers	2.12.14-5ubuntu3.11	8 years ago
42		* SECURITY UPDATE: Poodle TLS issue * SECURITY UPDATE: Poodle TLS issue   - debian/patches/fix_tls_poodle.patch: fixes off by one      issue in padding check.     Patch created by Hanno Boeck (https://hboeck.de/)   (LP: #1510163)	Bryan Quigley	2.12.14-5ubuntu3.10	8 years ago
41		* SECURITY UPDATE: signature forgery issue * SECURITY UPDATE: signature forgery issue   - debian/patches/CVE-2015-0282.patch: make sure the signature     algorithms match in lib/gnutls_algorithms.c, lib/gnutls_algorithms.h,     lib/gnutls_pubkey.c, lib/gnutls_sig.c, lib/x509/common.h,     lib/x509/crq.c, lib/x509/privkey.c, lib/x509/verify.c,     lib/x509/x509.c, lib/x509/x509_int.h.   - CVE-2015-0282 * SECURITY UPDATE: certificate algorithm consistency issue   - debian/patches/CVE-2015-0294.patch: make sure the two signature     algorithms match on cert import in lib/x509/x509.c.   - CVE-2015-0294	Marc Deslauriers	2.12.14-5ubuntu3.9	9 years ago
40		* SECURITY UPDATE: memory corruption due to server hello par... * SECURITY UPDATE: memory corruption due to server hello parsing   - debian/patches/CVE-2014-3466.patch: validate session_id_len in     lib/gnutls_handshake.c.   - CVE-2014-3466	Marc Deslauriers	2.12.14-5ubuntu3.8	9 years ago
39		* SECURITY UPDATE: certificate validation bypass * SECURITY UPDATE: certificate validation bypass   - debian/patches/CVE-2014-0092.patch: correct return codes in     lib/x509/verify.c.   - CVE-2014-0092	Marc Deslauriers	2.12.14-5ubuntu3.7	10 years ago
38		* SECURITY UPDATE: incorrect v1 intermediate cert handling * SECURITY UPDATE: incorrect v1 intermediate cert handling   - debian/patches/CVE-2014-1959.patch: don't consider a v1 intermediate     cert to be a valid CA by default in lib/x509/verify.c.   - CVE-2014-1959	Marc Deslauriers	2.12.14-5ubuntu3.6	10 years ago
37		* SECURITY UPDATE: denial of service via incorrect pad * SECURITY UPDATE: denial of service via incorrect pad   - debian/patches/CVE-2013-2116.patch: added sanity check in     lib/gnutls_cipher.c.   - CVE-2013-2116	Marc Deslauriers	2.12.14-5ubuntu3.4	10 years ago
36		* SECURITY UPDATE: "Lucky Thirteen" timing side-channel TLS ... * SECURITY UPDATE: "Lucky Thirteen" timing side-channel TLS attack   - debian/patches/CVE-2013-1619.patch: avoid timing attacks in     lib/gnutls_cipher.c, lib/gnutls_hash_int.h.   - CVE-2013-1619	Marc Deslauriers	2.12.14-5ubuntu3.2	11 years ago
35		* SECURITY UPDATE: Denial of service via crafted TLS record ... * SECURITY UPDATE: Denial of service via crafted TLS record (LP: #978661)   - debian/patches/CVE-2012-1573.patch: Validate the size of a     GenericBlockCipher structure as it is processed. Based on upstream     patch.   - CVE-2012-1573	Tyler Hicks	2.12.14-5ubuntu3	12 years ago
34		Bump the version of gnutls-doc too, for the same reason as g... Bump the version of gnutls-doc too, for the same reason as gnutls-bin.	Colin Watson	2.12.14-5ubuntu2	12 years ago
33		Start building gnutls-bin from this source package again, su... Start building gnutls-bin from this source package again, superseding the version in gnutls28: gnutls28's licensing is currently too strict for many of the free software packages built against it in Ubuntu main and we only want to support a single version.  Bump its version to achieve this.	Colin Watson	2.12.14-5ubuntu1	12 years ago
32		Disable gnutls-guile package, let it be provided by gnutls28... Disable gnutls-guile package, let it be provided by gnutls28.	Andreas Metzler	2.12.14-5	12 years ago
31		* Prepare for uploading gnutls28 to unstable. * Prepare for uploading gnutls28 to unstable.   + Drop gnutls-bin package, it is going to be provided by gnutls28.   + Binaries are still useful for debugging, ship them with libgnutls-dbg     in LIBDIR/libgnutls26.	Andreas Metzler	2.12.14-4	12 years ago
30		[20_tests-select.diff] Do not run gnulib test-select test an... [20_tests-select.diff] Do not run gnulib test-select test anymore. The test fails on kfreebsd-i386, the gnutls library does not use select(). Closes: #648247	Andreas Metzler	2.12.14-3	12 years ago
29		* New upstream version. * New upstream version.   + Allow CA importing of 0 certificates to succeed. Closes: #640639 * Add libp11-kit-dev to libgnutls-dev dependencies. (see #643811) * [20_guiledocstring.diff] guile: Fix docstring extraction with CPP 4.5+.	Andreas Metzler	2.12.11-1	12 years ago
28		* Backport from Debian (Andreas Metzler, LP: #829467): * Backport from Debian (Andreas Metzler, LP: #829467):   - [20_gcrypt15compat.diff] Fix compatibility with gcrypt 1.5.	Colin Watson	2.10.5-1ubuntu3	12 years ago
27		debian/libgnutlsxx26.install, debian/control: convert libgnu... debian/libgnutlsxx26.install, debian/control: convert libgnutlsxx26 for multiarch as well.	Steve Langasek	2.10.5-1ubuntu2	12 years ago
26		* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes:   - Fix build failure with --no-add-needed.   - Build for multiarch.	Steve Langasek	2.10.5-1ubuntu1	12 years ago
25		run update-maintainer run update-maintainer	Steve Langasek	2.8.6-1ubuntu2	13 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1