~ubuntu-branches/ubuntu/saucy/gnutls26/saucy-updates : changes

~ubuntu-branches/ubuntu/saucy/gnutls26/saucy-updates » Changes from revision 43

From Revision 43 to 24

Rev	Summary	Authors	Tags	Date
43	* SECURITY UPDATE: memory corruption due to server hello par... * SECURITY UPDATE: memory corruption due to server hello parsing - debian/patches/CVE-2014-3466.patch: validate session_id_len in lib/gnutls_handshake.c. - CVE-2014-3466	Marc Deslauriers	2.12.23-1ubuntu4.3	9 years ago
42	* SECURITY UPDATE: certificate validation bypass * SECURITY UPDATE: certificate validation bypass - debian/patches/CVE-2014-0092.patch: correct return codes in lib/x509/verify.c. - CVE-2014-0092	Marc Deslauriers	2.12.23-1ubuntu4.2	10 years ago
41	* SECURITY UPDATE: incorrect v1 intermediate cert handling * SECURITY UPDATE: incorrect v1 intermediate cert handling - debian/patches/CVE-2014-1959.patch: don't consider a v1 intermediate cert to be a valid CA by default in lib/x509/verify.c. - CVE-2014-1959	Marc Deslauriers	2.12.23-1ubuntu4.1	10 years ago
40	Link test-lock and test-thread_create with -Wl,--no-as-neede... Link test-lock and test-thread_create with -Wl,--no-as-needed; see https://lists.gnu.org/archive/html/bug-gnulib/2013-10/msg00017.html. Based on a similar change by Matthias Klose in libidn.	Colin Watson	2.12.23-1ubuntu4	10 years ago
39	* SECURITY UPDATE: denial of service via incorrect pad * SECURITY UPDATE: denial of service via incorrect pad - debian/patches/CVE-2013-2116.patch: added sanity check in lib/gnutls_cipher.c. - CVE-2013-2116	Marc Deslauriers	2.12.23-1ubuntu2	10 years ago
38	* Merge from debian-experimental, remaining changes: * Merge from debian-experimental, remaining changes: - Build gnutls-bin from this source package rather than from gnutls28: gnutls28's licensing is currently too strict for many of the free software packages built against it in Ubuntu main and we only want to support a single version. Bump its version to achieve this. * Drop gnulib-gets.diff: upstream.	Timo Aaltonen	2.12.23-1ubuntu1	11 years ago
37	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Build gnutls-bin from this source package rather than from gnutls28: gnutls28's licensing is currently too strict for many of the free software packages built against it in Ubuntu main and we only want to support a single version. Bump its version to achieve this. * Avoid assuming that gets is declared.	Colin Watson	2.12.20-2ubuntu1	11 years ago
36	Apply upstream patch to fix validation of certificates when ... Apply upstream patch to fix validation of certificates when more than one with the same short hash exists in the CA bundle (LP: #1003841).	Thorsten Glaser	2.12.14-5ubuntu4	11 years ago
35	* SECURITY UPDATE: Denial of service via crafted TLS record ... * SECURITY UPDATE: Denial of service via crafted TLS record (LP: #978661) - debian/patches/CVE-2012-1573.patch: Validate the size of a GenericBlockCipher structure as it is processed. Based on upstream patch. - CVE-2012-1573	Tyler Hicks	2.12.14-5ubuntu3	12 years ago
34	Bump the version of gnutls-doc too, for the same reason as g... Bump the version of gnutls-doc too, for the same reason as gnutls-bin.	Colin Watson	2.12.14-5ubuntu2	12 years ago
33	Start building gnutls-bin from this source package again, su... Start building gnutls-bin from this source package again, superseding the version in gnutls28: gnutls28's licensing is currently too strict for many of the free software packages built against it in Ubuntu main and we only want to support a single version. Bump its version to achieve this.	Colin Watson	2.12.14-5ubuntu1	12 years ago
32	Disable gnutls-guile package, let it be provided by gnutls28... Disable gnutls-guile package, let it be provided by gnutls28.	Andreas Metzler		12 years ago
31	* Prepare for uploading gnutls28 to unstable. * Prepare for uploading gnutls28 to unstable. + Drop gnutls-bin package, it is going to be provided by gnutls28. + Binaries are still useful for debugging, ship them with libgnutls-dbg in LIBDIR/libgnutls26.	Andreas Metzler		12 years ago
30	[20_tests-select.diff] Do not run gnulib test-select test an... [20_tests-select.diff] Do not run gnulib test-select test anymore. The test fails on kfreebsd-i386, the gnutls library does not use select(). Closes: #648247	Andreas Metzler		12 years ago
29	* New upstream version. * New upstream version. + Allow CA importing of 0 certificates to succeed. Closes: #640639 * Add libp11-kit-dev to libgnutls-dev dependencies. (see #643811) * [20_guiledocstring.diff] guile: Fix docstring extraction with CPP 4.5+.	Andreas Metzler		12 years ago
28	* Backport from Debian (Andreas Metzler, LP: #829467): * Backport from Debian (Andreas Metzler, LP: #829467): - [20_gcrypt15compat.diff] Fix compatibility with gcrypt 1.5.	Colin Watson	2.10.5-1ubuntu3	12 years ago
27	debian/libgnutlsxx26.install, debian/control: convert libgnu... debian/libgnutlsxx26.install, debian/control: convert libgnutlsxx26 for multiarch as well.	Steve Langasek	2.10.5-1ubuntu2	12 years ago
26	* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes: - Fix build failure with --no-add-needed. - Build for multiarch.	Steve Langasek	2.10.5-1ubuntu1	12 years ago
25	run update-maintainer run update-maintainer	Steve Langasek	2.8.6-1ubuntu2	13 years ago
24	releasing version 2.8.6-1ubuntu2 releasing version 2.8.6-1ubuntu2	Steve Langasek		13 years ago

Older »