diffstat for gnutls28-3.4.10 gnutls28-3.4.10 changelog | 98 ++++++++++++++++++++++++ control | 19 ++++ libgnutls-dev.install | 4 libgnutls28-dev.install | 4 patches/disable_global_init_override_test.patch | 17 ++++ patches/series | 1 6 files changed, 137 insertions(+), 6 deletions(-) diff -Nru gnutls28-3.4.10/debian/changelog gnutls28-3.4.10/debian/changelog --- gnutls28-3.4.10/debian/changelog 2016-03-17 18:41:30.000000000 +0000 +++ gnutls28-3.4.10/debian/changelog 2016-03-21 13:55:35.000000000 +0000 @@ -1,3 +1,12 @@ +gnutls28 (3.4.10-4ubuntu1) xenial; urgency=medium + + * Merge with Debian; remaining changes: + - Make gnutls28 default. + - debian/patches/disable_global_init_override_test.patch: disable failing + test. + + -- Matthias Klose Mon, 21 Mar 2016 14:53:18 +0100 + gnutls28 (3.4.10-4) unstable; urgency=medium * 43_fix_cpucapoverride.diff by Nikos Mavrogiannopoulos: Fix @@ -30,6 +39,15 @@ -- Andreas Metzler Sat, 05 Mar 2016 08:45:52 +0100 +gnutls28 (3.4.9-2ubuntu1) xenial; urgency=medium + + * Merge with Debian; remaining changes: + - Make gnutls28 default. + - debian/patches/disable_global_init_override_test.patch: disable failing + test. + + -- Matthias Klose Wed, 17 Feb 2016 20:47:48 +0100 + gnutls28 (3.4.9-2) unstable; urgency=medium * Upload to unstable. @@ -167,6 +185,15 @@ -- Andreas Metzler Fri, 05 Jun 2015 11:39:19 +0200 +gnutls28 (3.3.20-1ubuntu1) xenial; urgency=medium + + * Merge from Debian unstable. Remaining changes: + - Make gnutls28 default. + * debian/patches/disable_global_init_override_test.patch: disable failing + test. + + -- Marc Deslauriers Thu, 21 Jan 2016 08:58:40 -0500 + gnutls28 (3.3.20-1) unstable; urgency=medium * autoreconf requires automake 1.12.2, add build-dependency. @@ -183,6 +210,13 @@ -- Andreas Metzler Sun, 22 Nov 2015 17:48:27 +0100 +gnutls28 (3.3.18-1ubuntu1) xenial; urgency=medium + + * Merge from Debian unstable. Remaining changes: + - Make gnutls28 default. + + -- Marc Deslauriers Fri, 30 Oct 2015 08:32:53 -0400 + gnutls28 (3.3.18-1) unstable; urgency=medium * New upstream version. @@ -244,6 +278,22 @@ -- Andreas Metzler Fri, 12 Jun 2015 19:10:33 +0200 +gnutls28 (3.3.15-5ubuntu2) wily; urgency=medium + + * SECURITY UPDATE: Double free in certificate DN decoding + - debian/patches/CVE-2015-6251.patch: Reset the output value on error + in lib/x509/common.c. + - CVE-2015-6251 + + -- Marc Deslauriers Mon, 31 Aug 2015 14:45:42 -0400 + +gnutls28 (3.3.15-5ubuntu1) wily; urgency=medium + + * Merge from Debian unstable. Remaining changes: + - Make gnutls28 default. + + -- Adam Conrad Thu, 11 Jun 2015 14:47:40 -0600 + gnutls28 (3.3.15-5) unstable; urgency=medium * Upload to unstable. @@ -270,6 +320,16 @@ -- Andreas Metzler Wed, 13 May 2015 19:20:07 +0200 +gnutls28 (3.3.15-2ubuntu1) wily; urgency=medium + + * Merge from Debian unstable. Remaining changes: + - Make gnutls28 default. + * Dropped patches included in new version: + - debian/patches/CVE-2015-0294.patch + - debian/patches/CVE-2014-8564.patch + + -- Marc Deslauriers Thu, 21 May 2015 08:47:19 -0400 + gnutls28 (3.3.15-2) unstable; urgency=medium * 50_updated-sign-md5-rep-to-reduce-false-failures.patch from upstream GIT, @@ -403,6 +463,32 @@ -- Andreas Metzler Wed, 12 Nov 2014 19:31:07 +0100 +gnutls28 (3.3.8-3ubuntu3) vivid; urgency=medium + + * SECURITY UPDATE: certificate algorithm consistency issue + - debian/patches/CVE-2015-0294.patch: make sure the two signature + algorithms match on cert import in lib/x509/x509.c. + - CVE-2015-0294 + + -- Marc Deslauriers Fri, 20 Mar 2015 08:16:02 -0400 + +gnutls28 (3.3.8-3ubuntu2) vivid; urgency=medium + + * SECURITY UPDATE: denial of service and possible code execution via + elliptic curves parameter printing + - debian/patches/CVE-2014-8564.patch: add more sanity checks in + lib/gnutls_ecc.c. + - CVE-2014-8564 + + -- Marc Deslauriers Mon, 10 Nov 2014 15:18:59 -0500 + +gnutls28 (3.3.8-3ubuntu1) vivid; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Make gnutls28 default. + + -- Michael Vogt Thu, 30 Oct 2014 15:21:33 +0100 + gnutls28 (3.3.8-3) unstable; urgency=high [ Daniel Kahn Gillmor ] @@ -573,6 +659,18 @@ -- Andreas Metzler Sat, 29 Mar 2014 19:19:37 +0100 +gnutls28 (3.2.16-1ubuntu2) utopic; urgency=medium + + * No-change rebuild to get debug symbols on all architectures. + + -- Brian Murray Tue, 21 Oct 2014 14:15:57 -0700 + +gnutls28 (3.2.16-1ubuntu1) utopic; urgency=medium + + * Make gnutls28 default. + + -- Dimitri John Ledkov Fri, 08 Aug 2014 08:24:17 +0100 + gnutls28 (3.2.16-1) unstable; urgency=medium * New upstream version. diff -Nru gnutls28-3.4.10/debian/control gnutls28-3.4.10/debian/control --- gnutls28-3.4.10/debian/control 2016-03-05 07:16:57.000000000 +0000 +++ gnutls28-3.4.10/debian/control 2016-03-21 13:55:35.000000000 +0000 @@ -1,7 +1,8 @@ Source: gnutls28 Section: libs Priority: optional -Maintainer: Debian GnuTLS Maintainers +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Debian GnuTLS Maintainers Uploaders: Andreas Metzler , Eric Dorland , James Westby , @@ -23,7 +24,7 @@ Vcs-Browser: https://anonscm.debian.org/cgit/pkg-gnutls/gnutls.git/ Homepage: http://www.gnutls.org/ -Package: libgnutls28-dev +Package: libgnutls-dev Section: libdevel Architecture: any Provides: gnutls-dev, libgnutls-openssl-dev @@ -55,6 +56,20 @@ . This package contains the GnuTLS development files. +Package: libgnutls28-dev +Section: libdevel +Architecture: any +Depends: libgnutls-dev (= ${binary:Version}) +Multi-Arch: same +Description: dummy transitional package for GNU TLS library - development files + This is a transitional dummy package for libgnutls28-dev to + libgnutls-dev migration. GnuTLS is a portable library which + implements the Transport Layer Security (TLS 1.0, 1.1, 1.2) and + Secure Sockets Layer (SSL) 3.0 and Datagram Transport Layer Security + (DTLS 1.0, 1.2) protocols. + . + This package can be safely removed. + Package: libgnutls30 Priority: standard Architecture: any diff -Nru gnutls28-3.4.10/debian/libgnutls-dev.install gnutls28-3.4.10/debian/libgnutls-dev.install --- gnutls28-3.4.10/debian/libgnutls-dev.install 1970-01-01 00:00:00.000000000 +0000 +++ gnutls28-3.4.10/debian/libgnutls-dev.install 2016-03-21 13:55:35.000000000 +0000 @@ -0,0 +1,4 @@ +debian/tmp/usr/include/* +debian/tmp/usr/lib/*/libgnutls*.so +debian/tmp/usr/lib/*/libgnutls*.a +debian/tmp/usr/lib/*/pkgconfig/gnutls.pc diff -Nru gnutls28-3.4.10/debian/libgnutls28-dev.install gnutls28-3.4.10/debian/libgnutls28-dev.install --- gnutls28-3.4.10/debian/libgnutls28-dev.install 2013-12-01 17:51:19.000000000 +0000 +++ gnutls28-3.4.10/debian/libgnutls28-dev.install 1970-01-01 00:00:00.000000000 +0000 @@ -1,4 +0,0 @@ -debian/tmp/usr/include/* -debian/tmp/usr/lib/*/libgnutls*.so -debian/tmp/usr/lib/*/libgnutls*.a -debian/tmp/usr/lib/*/pkgconfig/gnutls.pc diff -Nru gnutls28-3.4.10/debian/patches/disable_global_init_override_test.patch gnutls28-3.4.10/debian/patches/disable_global_init_override_test.patch --- gnutls28-3.4.10/debian/patches/disable_global_init_override_test.patch 1970-01-01 00:00:00.000000000 +0000 +++ gnutls28-3.4.10/debian/patches/disable_global_init_override_test.patch 2016-03-21 14:05:17.000000000 +0000 @@ -0,0 +1,17 @@ +Description: disable failing test +Author: Marc Deslauriers +Forwarded: no + +Index: b/tests/Makefile.am +=================================================================== +--- a/tests/Makefile.am ++++ b/tests/Makefile.am +@@ -90,7 +90,7 @@ ctests = mini-record-2 simple gc set_pkc + x509sign-verify2 mini-alignment oids atfork prf \ + status-request status-request-ok fallback-scsv pkcs8-key-decode \ + mini-session-verify-function auto-verify mini-x509-default-prio \ +- global-init-override pcert-list ++ pcert-list + + mini_dtls_pthread_LDADD = $(LDADD) -lpthread + diff -Nru gnutls28-3.4.10/debian/patches/series gnutls28-3.4.10/debian/patches/series --- gnutls28-3.4.10/debian/patches/series 2016-03-17 18:22:20.000000000 +0000 +++ gnutls28-3.4.10/debian/patches/series 2016-03-21 14:04:30.000000000 +0000 @@ -4,3 +4,4 @@ 41_tests-mini-loss-time-ensure-client-timeouts.diff 42_mini-loss-time-improved-timeout-detection.patch 43_fix_cpucapoverride.diff +disable_global_init_override_test.patch