~ubuntu-branches/ubuntu/trusty/gnutls26/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/gnutls26/trusty-security » Changes from revision 49

From Revision 49 to 30

Rev	Summary	Authors	Tags	Date
49	debian/patches/compare_ca_name_and_key.patch: when comparing... debian/patches/compare_ca_name_and_key.patch: when comparing a CA certificate with the trusted list compare the name and key. This will allow the future removal of 1024-bit RSA keys from the ca-certificates package.	Marc Deslauriers	2.12.23-12ubuntu2.5	8 years ago
48	* SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2 * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2 - debian/patches/CVE-2015-7575.patch: do not consider any values from the extension data to decide acceptable algorithms in lib/ext_signature.c. - CVE-2015-7575	Marc Deslauriers	2.12.23-12ubuntu2.4	8 years ago
47	* SECURITY UPDATE: Poodle TLS issue * SECURITY UPDATE: Poodle TLS issue - debian/patches/fix_tls_poodle.patch: fixes off by one issue in padding check. Patch created by Hanno Boeck (https://hboeck.de/) (LP: #1510163)	Bryan Quigley	2.12.23-12ubuntu2.3	8 years ago
46	* SECURITY UPDATE: signature forgery issue * SECURITY UPDATE: signature forgery issue - debian/patches/CVE-2015-0282.patch: make sure the signature algorithms match in lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, lib/gnutls_pubkey.c, lib/gnutls_sig.c, lib/x509/common.h, lib/x509/crq.c, lib/x509/privkey.c, lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_int.h. - CVE-2015-0282 * SECURITY UPDATE: certificate algorithm consistency issue - debian/patches/CVE-2015-0294.patch: make sure the two signature algorithms match on cert import in lib/x509/x509.c. - CVE-2015-0294	Marc Deslauriers	2.12.23-12ubuntu2.2	9 years ago
45	* SECURITY UPDATE: memory corruption due to server hello par... * SECURITY UPDATE: memory corruption due to server hello parsing - debian/patches/CVE-2014-3466.patch: validate session_id_len in lib/gnutls_handshake.c. - CVE-2014-3466	Marc Deslauriers	2.12.23-12ubuntu2.1	9 years ago
44	* SECURITY UPDATE: certificate validation bypass * SECURITY UPDATE: certificate validation bypass - debian/patches/CVE-2014-0092.patch: correct return codes in lib/x509/verify.c. - CVE-2014-0092	Marc Deslauriers	2.12.23-12ubuntu2	10 years ago
43	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Build gnutls-bin from this source package rather than from gnutls28: gnutls28's licensing is currently too strict for many of the free software packages built against it in Ubuntu main and we only want to support a single version. Bump its version to achieve this. - Drop the sipsak Breaks on armhf back to (<= 0.9.6-2.1), which is sufficient for Ubuntu. The former versioning rendered sipsak uninstallable. - Link test-lock and test-thread_create with -Wl,--no-as-needed; see https://lists.gnu.org/archive/html/bug-gnulib/2013-10/msg00017.html. - debian/patches/99_update-libtool.patch: Update libtool.m4 - debian/rules: Set CC on cross-builds, so autoconf doesn't lose its mind.	Matthias Klose	2.12.23-12ubuntu1	10 years ago
42	* SECURITY UPDATE: incorrect v1 intermediate cert handling * SECURITY UPDATE: incorrect v1 intermediate cert handling - debian/patches/CVE-2014-1959.patch: don't consider a v1 intermediate cert to be a valid CA by default in lib/x509/verify.c. - CVE-2014-1959	Marc Deslauriers	2.12.23-1ubuntu6	10 years ago
41	* 25_updatedgdocfrommaster.diff - Update gdoc script from gn... * 25_updatedgdocfrommaster.diff - Update gdoc script from gnutls master to fix spurious build failure with perl 5.18. Closes: #724167 * debian/patches/99_update-libtool.patch: Update libtool.m4 * debian/rules: Set CC on cross-builds, so autoconf doesn't lose its mind.	Adam Conrad	2.12.23-1ubuntu5	10 years ago
40	Link test-lock and test-thread_create with -Wl,--no-as-neede... Link test-lock and test-thread_create with -Wl,--no-as-needed; see https://lists.gnu.org/archive/html/bug-gnulib/2013-10/msg00017.html. Based on a similar change by Matthias Klose in libidn.	Colin Watson	2.12.23-1ubuntu4	10 years ago
39	* SECURITY UPDATE: denial of service via incorrect pad * SECURITY UPDATE: denial of service via incorrect pad - debian/patches/CVE-2013-2116.patch: added sanity check in lib/gnutls_cipher.c. - CVE-2013-2116	Marc Deslauriers	2.12.23-1ubuntu2	10 years ago
38	* Merge from debian-experimental, remaining changes: * Merge from debian-experimental, remaining changes: - Build gnutls-bin from this source package rather than from gnutls28: gnutls28's licensing is currently too strict for many of the free software packages built against it in Ubuntu main and we only want to support a single version. Bump its version to achieve this. * Drop gnulib-gets.diff: upstream.	Timo Aaltonen	2.12.23-1ubuntu1	11 years ago
37	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Build gnutls-bin from this source package rather than from gnutls28: gnutls28's licensing is currently too strict for many of the free software packages built against it in Ubuntu main and we only want to support a single version. Bump its version to achieve this. * Avoid assuming that gets is declared.	Colin Watson	2.12.20-2ubuntu1	11 years ago
36	Apply upstream patch to fix validation of certificates when ... Apply upstream patch to fix validation of certificates when more than one with the same short hash exists in the CA bundle (LP: #1003841).	Thorsten Glaser	2.12.14-5ubuntu4	11 years ago
35	* SECURITY UPDATE: Denial of service via crafted TLS record ... * SECURITY UPDATE: Denial of service via crafted TLS record (LP: #978661) - debian/patches/CVE-2012-1573.patch: Validate the size of a GenericBlockCipher structure as it is processed. Based on upstream patch. - CVE-2012-1573	Tyler Hicks	2.12.14-5ubuntu3	12 years ago
34	Bump the version of gnutls-doc too, for the same reason as g... Bump the version of gnutls-doc too, for the same reason as gnutls-bin.	Colin Watson	2.12.14-5ubuntu2	12 years ago
33	Start building gnutls-bin from this source package again, su... Start building gnutls-bin from this source package again, superseding the version in gnutls28: gnutls28's licensing is currently too strict for many of the free software packages built against it in Ubuntu main and we only want to support a single version. Bump its version to achieve this.	Colin Watson	2.12.14-5ubuntu1	12 years ago
32	Disable gnutls-guile package, let it be provided by gnutls28... Disable gnutls-guile package, let it be provided by gnutls28.	Andreas Metzler		12 years ago
31	* Prepare for uploading gnutls28 to unstable. * Prepare for uploading gnutls28 to unstable. + Drop gnutls-bin package, it is going to be provided by gnutls28. + Binaries are still useful for debugging, ship them with libgnutls-dbg in LIBDIR/libgnutls26.	Andreas Metzler		12 years ago
30	[20_tests-select.diff] Do not run gnulib test-select test an... [20_tests-select.diff] Do not run gnulib test-select test anymore. The test fails on kfreebsd-i386, the gnutls library does not use select(). Closes: #648247	Andreas Metzler		12 years ago

Older »