Author: Ubuntu Git Importer
Author Date: 2019-07-09 06:11:55 UTC

DSC file for 3.6.8-2

Author: Andreas Metzler
Author Date: 2019-07-06 12:10:29 UTC

Import patches-applied version 3.6.8-2 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: ae20ff16a62519a60d64f012784cbc992f2275a7
Unapplied parent: b126c482dd198582d2fb40442f6e48eb64d51b19

New changelog entries:
  * Use DH 11 compat again.
  * 3.6.8 builds with gcc-9. Closes: #925701
  * Fix autopkgtest on 32bit architectures. (Bug report and patch by Julian
    Andres Klode) Closes: #930541
    See also https://gitlab.com/gnutls/gnutls/merge_requests/986
  * Upload to unstable.

Author: Andreas Metzler
Author Date: 2019-07-06 12:10:29 UTC

Import patches-unapplied version 3.6.8-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 33686aed16fb8edd21da779f37e1e37f92f1b0b0

New changelog entries:
  * Use DH 11 compat again.
  * 3.6.8 builds with gcc-9. Closes: #925701
  * Fix autopkgtest on 32bit architectures. (Bug report and patch by Julian
    Andres Klode) Closes: #930541
    See also https://gitlab.com/gnutls/gnutls/merge_requests/986
  * Upload to unstable.

Author: Ubuntu Git Importer
Author Date: 2019-06-14 20:59:06 UTC

DSC file for 3.6.7-4ubuntu1

Author: Steve Langasek
Author Date: 2019-06-14 20:15:25 UTC

Import patches-unapplied version 3.6.7-4ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 3d43fb001ad637a1d077081a7f6dc839bbc4cac8

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/add-openssl-test-link.patch: add link for libssl
    - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
      letting it be assumed
  * Dropped changes, years old, never upstreamed, and presumed obsolete:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.

Author: Steve Langasek
Author Date: 2019-06-14 20:15:25 UTC

Import patches-unapplied version 3.6.7-4ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 3d43fb001ad637a1d077081a7f6dc839bbc4cac8

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/add-openssl-test-link.patch: add link for libssl
    - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
      letting it be assumed
  * Dropped changes, years old, never upstreamed, and presumed obsolete:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.

Author: Steve Langasek
Author Date: 2019-06-14 20:15:25 UTC

Import patches-applied version 3.6.7-4ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 60ff05dce10e7bf61fc8ccd6d86a28b63c7b9d40
Unapplied parent: 6571534bc78538f62903196b6d66c53965cf669a

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/add-openssl-test-link.patch: add link for libssl
    - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
      letting it be assumed
  * Dropped changes, years old, never upstreamed, and presumed obsolete:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.

Author: Steve Langasek
Author Date: 2019-06-14 20:15:25 UTC

Import patches-applied version 3.6.7-4ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 60ff05dce10e7bf61fc8ccd6d86a28b63c7b9d40
Unapplied parent: 6571534bc78538f62903196b6d66c53965cf669a

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/add-openssl-test-link.patch: add link for libssl
    - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
      letting it be assumed
  * Dropped changes, years old, never upstreamed, and presumed obsolete:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.

Author: Steve Langasek
Author Date: 2019-06-14 20:15:25 UTC

Import patches-applied version 3.6.7-4ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 60ff05dce10e7bf61fc8ccd6d86a28b63c7b9d40
Unapplied parent: 6571534bc78538f62903196b6d66c53965cf669a

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/add-openssl-test-link.patch: add link for libssl
    - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
      letting it be assumed
  * Dropped changes, years old, never upstreamed, and presumed obsolete:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.

Author: Steve Langasek
Author Date: 2019-06-14 20:15:25 UTC

Import patches-applied version 3.6.7-4ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 60ff05dce10e7bf61fc8ccd6d86a28b63c7b9d40
Unapplied parent: 6571534bc78538f62903196b6d66c53965cf669a

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/add-openssl-test-link.patch: add link for libssl
    - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
      letting it be assumed
  * Dropped changes, years old, never upstreamed, and presumed obsolete:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.

Author: Steve Langasek
Author Date: 2019-06-14 20:15:25 UTC

Import patches-unapplied version 3.6.7-4ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 3d43fb001ad637a1d077081a7f6dc839bbc4cac8

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/add-openssl-test-link.patch: add link for libssl
    - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
      letting it be assumed
  * Dropped changes, years old, never upstreamed, and presumed obsolete:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.

Author: Steve Langasek
Author Date: 2019-06-14 20:15:25 UTC

Import patches-unapplied version 3.6.7-4ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 3d43fb001ad637a1d077081a7f6dc839bbc4cac8

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/add-openssl-test-link.patch: add link for libssl
    - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
      letting it be assumed
  * Dropped changes, years old, never upstreamed, and presumed obsolete:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.

Author: Andreas Metzler
Author Date: 2019-06-12 17:21:23 UTC

Import patches-unapplied version 3.6.7-4 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 036677eef4d557a6539f39661826306d1b38b179

New changelog entries:
  * Cherry-pick important bug-fixes from 3.6.8:
    + 40_rel3.6.8_01-gnutls_srp_entry_free-follow-consistent-behavior-in.patch
      The gnutls_srp_set_server_credentials_function can be used with the 8192
      parameters as well.
      https://gitlab.com/gnutls/gnutls/issues/761
    + 40_rel3.6.8_05-lib-nettle-fix-carry-flag-in-Streebog-code.patch
      Fix calculation of Streebog digests (incorrect carry operation in
      512 bit addition).
    + 40_rel3.6.8_10-ext-record_size_limit-distinguish-sending-and-receiv.patch
      Fix compatibility of GnuTLS 3.6.[456] server with GnuTLS 3.6.7 client.
      Closes: #929907
    + 40_rel3.6.8_15-Apply-STD3-ASCII-rules-in-gnutls_idna_map.patch
      Apply STD3 ASCII rules in gnutls_idna_map() to prevent hostname/domain
      crafting via IDNA conversion.
      https://gitlab.com/gnutls/gnutls/issues/720
    + 40_rel3.6.8_20-pubkey-remove-deprecated-TLS1_RSA-flag-check.patch
      Fixed bug preventing the use of gnutls_pubkey_verify_data2() and
      gnutls_pubkey_verify_hash2() with the GNUTLS_VERIFY_DISABLE_CA_SIGN
      flag.
      https://gitlab.com/gnutls/gnutls/issues/754

Author: Andreas Metzler
Author Date: 2019-06-12 17:21:23 UTC

Import patches-applied version 3.6.7-4 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 9e9aced82ea74d62771a181b2412b85eeecd9098
Unapplied parent: 60cf2d4fb62586c33ce458e8638b495ab627f209

New changelog entries:
  * Cherry-pick important bug-fixes from 3.6.8:
    + 40_rel3.6.8_01-gnutls_srp_entry_free-follow-consistent-behavior-in.patch
      The gnutls_srp_set_server_credentials_function can be used with the 8192
      parameters as well.
      https://gitlab.com/gnutls/gnutls/issues/761
    + 40_rel3.6.8_05-lib-nettle-fix-carry-flag-in-Streebog-code.patch
      Fix calculation of Streebog digests (incorrect carry operation in
      512 bit addition).
    + 40_rel3.6.8_10-ext-record_size_limit-distinguish-sending-and-receiv.patch
      Fix compatibility of GnuTLS 3.6.[456] server with GnuTLS 3.6.7 client.
      Closes: #929907
    + 40_rel3.6.8_15-Apply-STD3-ASCII-rules-in-gnutls_idna_map.patch
      Apply STD3 ASCII rules in gnutls_idna_map() to prevent hostname/domain
      crafting via IDNA conversion.
      https://gitlab.com/gnutls/gnutls/issues/720
    + 40_rel3.6.8_20-pubkey-remove-deprecated-TLS1_RSA-flag-check.patch
      Fixed bug preventing the use of gnutls_pubkey_verify_data2() and
      gnutls_pubkey_verify_hash2() with the GNUTLS_VERIFY_DISABLE_CA_SIGN
      flag.
      https://gitlab.com/gnutls/gnutls/issues/754

Author: Andreas Metzler
Author Date: 2019-05-30 16:20:43 UTC

Import patches-applied version 3.6.8-1 to applied/debian/experimental

Imported using git-ubuntu import.

Changelog parent: 9e9aced82ea74d62771a181b2412b85eeecd9098
Unapplied parent: a754c78405be81036f832aa664747e33e32f12a6

New changelog entries:
  * New upstream version.
    + Rebuild gnutls.pdf, add b-d on texlive-generic-recommended,
      texlive-latex-base.
    + Update symbol file.

Author: Andreas Metzler
Author Date: 2019-05-30 16:20:43 UTC

Import patches-unapplied version 3.6.8-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 036677eef4d557a6539f39661826306d1b38b179

New changelog entries:
  * New upstream version.
    + Rebuild gnutls.pdf, add b-d on texlive-generic-recommended,
      texlive-latex-base.
    + Update symbol file.

Author: Marc Deslauriers
Author Date: 2019-05-28 17:14:35 UTC

Import patches-applied version 3.6.4-2ubuntu1.2 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 9d299e638141c45bd6d08dbde963c4a3da6805c2
Unapplied parent: 00dfcdc4b60e88ac0ba66bc72ebcba62eec455cd

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:18:12 UTC

Import patches-applied version 3.5.18-1ubuntu1.1 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 2a73589137e0b19b17c7438b4eba70c19c098db9
Unapplied parent: f8c9d95db4f513beac8921711fd2e313fb112ef6

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/priority.c,
      tests/dtls1-2-mtu-check.c, tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: fix some casts in
      lib/extensions.c.
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829

Author: Marc Deslauriers
Author Date: 2019-05-28 17:18:12 UTC

Import patches-applied version 3.5.18-1ubuntu1.1 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 2a73589137e0b19b17c7438b4eba70c19c098db9
Unapplied parent: f8c9d95db4f513beac8921711fd2e313fb112ef6

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/priority.c,
      tests/dtls1-2-mtu-check.c, tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: fix some casts in
      lib/extensions.c.
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829

Author: Marc Deslauriers
Author Date: 2019-05-28 17:18:12 UTC

Import patches-applied version 3.5.18-1ubuntu1.1 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 2a73589137e0b19b17c7438b4eba70c19c098db9
Unapplied parent: f8c9d95db4f513beac8921711fd2e313fb112ef6

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/priority.c,
      tests/dtls1-2-mtu-check.c, tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: fix some casts in
      lib/extensions.c.
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829

Author: Marc Deslauriers
Author Date: 2019-05-28 17:14:35 UTC

Import patches-applied version 3.6.4-2ubuntu1.2 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 9d299e638141c45bd6d08dbde963c4a3da6805c2
Unapplied parent: 00dfcdc4b60e88ac0ba66bc72ebcba62eec455cd

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:14:35 UTC

Import patches-applied version 3.6.4-2ubuntu1.2 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 9d299e638141c45bd6d08dbde963c4a3da6805c2
Unapplied parent: 00dfcdc4b60e88ac0ba66bc72ebcba62eec455cd

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:00:08 UTC

Import patches-applied version 3.6.5-2ubuntu1.1 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: ff3acb48dca3317ea5ba621461703feba45e3e22
Unapplied parent: 00ce0565ea432b9474ab386adb73ad5a8e0f52f6

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:00:08 UTC

Import patches-applied version 3.6.5-2ubuntu1.1 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: ff3acb48dca3317ea5ba621461703feba45e3e22
Unapplied parent: 00ce0565ea432b9474ab386adb73ad5a8e0f52f6

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:00:08 UTC

Import patches-applied version 3.6.5-2ubuntu1.1 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: ff3acb48dca3317ea5ba621461703feba45e3e22
Unapplied parent: 00ce0565ea432b9474ab386adb73ad5a8e0f52f6

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:32:56 UTC

Import patches-unapplied version 3.4.10-4ubuntu1.5 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: b98c9f728408ef5be675d4cb820cca3fd303ca22

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/gnutls_priority.c,
      tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846

Author: Marc Deslauriers
Author Date: 2019-05-28 17:32:56 UTC

Import patches-unapplied version 3.4.10-4ubuntu1.5 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: b98c9f728408ef5be675d4cb820cca3fd303ca22

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/gnutls_priority.c,
      tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846

Author: Marc Deslauriers
Author Date: 2019-05-28 17:32:56 UTC

Import patches-unapplied version 3.4.10-4ubuntu1.5 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: b98c9f728408ef5be675d4cb820cca3fd303ca22

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/gnutls_priority.c,
      tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846

Author: Marc Deslauriers
Author Date: 2019-05-28 17:00:08 UTC

Import patches-unapplied version 3.6.5-2ubuntu1.1 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 2122694712f56504a6ba381ae7a025c68ac35989

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:00:08 UTC

Import patches-unapplied version 3.6.5-2ubuntu1.1 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 2122694712f56504a6ba381ae7a025c68ac35989

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:00:08 UTC

Import patches-unapplied version 3.6.5-2ubuntu1.1 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 2122694712f56504a6ba381ae7a025c68ac35989

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:14:35 UTC

Import patches-unapplied version 3.6.4-2ubuntu1.2 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: e80e63e5d5c4f4020668ea1ccdf73704e305e6d6

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:14:35 UTC

Import patches-unapplied version 3.6.4-2ubuntu1.2 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: e80e63e5d5c4f4020668ea1ccdf73704e305e6d6

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:14:35 UTC

Import patches-unapplied version 3.6.4-2ubuntu1.2 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: e80e63e5d5c4f4020668ea1ccdf73704e305e6d6

New changelog entries:
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
      variables after free().
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829
  * SECURITY UPDATE: uninitialized pointer access
    - debian/patches/CVE-2019-3836.patch: add missing initialization of
      local variable in lib/handshake-tls13.c.
    - CVE-2019-3836

Author: Marc Deslauriers
Author Date: 2019-05-28 17:18:12 UTC

Import patches-unapplied version 3.5.18-1ubuntu1.1 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 0d36ddf0e20110147aa010c5fa7809a0066a6007

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/priority.c,
      tests/dtls1-2-mtu-check.c, tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: fix some casts in
      lib/extensions.c.
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829

Author: Marc Deslauriers
Author Date: 2019-05-28 17:18:12 UTC

Import patches-unapplied version 3.5.18-1ubuntu1.1 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 0d36ddf0e20110147aa010c5fa7809a0066a6007

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/priority.c,
      tests/dtls1-2-mtu-check.c, tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: fix some casts in
      lib/extensions.c.
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829

Author: Marc Deslauriers
Author Date: 2019-05-28 17:18:12 UTC

Import patches-unapplied version 3.5.18-1ubuntu1.1 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 0d36ddf0e20110147aa010c5fa7809a0066a6007

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/priority.c,
      tests/dtls1-2-mtu-check.c, tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846
  * SECURITY UPDATE: double free in cert verification API
    - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
      gnutls_free() in lib/includes/gnutls/gnutls.h.in.
    - debian/patches/CVE-2019-3829-2.patch: fix some casts in
      lib/extensions.c.
    - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
      in lib/x509/x509.c.
    - CVE-2019-3829

Author: Marc Deslauriers
Author Date: 2019-05-28 17:32:56 UTC

Import patches-applied version 3.4.10-4ubuntu1.5 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 9089e56f0ab93d740338b1c32c278df364e0f3c8
Unapplied parent: 64b26b2c1ad0fa27641e77070ddf398c5c441ba4

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/gnutls_priority.c,
      tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846

Author: Marc Deslauriers
Author Date: 2019-05-28 17:32:56 UTC

Import patches-applied version 3.4.10-4ubuntu1.5 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 9089e56f0ab93d740338b1c32c278df364e0f3c8
Unapplied parent: 64b26b2c1ad0fa27641e77070ddf398c5c441ba4

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/gnutls_priority.c,
      tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846

Author: Marc Deslauriers
Author Date: 2019-05-28 17:32:56 UTC

Import patches-applied version 3.4.10-4ubuntu1.5 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 9089e56f0ab93d740338b1c32c278df364e0f3c8
Unapplied parent: 64b26b2c1ad0fa27641e77070ddf398c5c441ba4

New changelog entries:
  * SECURITY UPDATE: Lucky-13 issues
    - debian/patches/CVE-2018-1084x-1.patch: correctly account the length
      field in SHA384 HMAC in lib/algorithms/mac.c, lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-2.patch: always hash the same amount of
      blocks that would have been on minimum pad in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-3.patch: require minimum padding under
      SSL3.0 in lib/gnutls_cipher.c.
    - debian/patches/CVE-2018-1084x-4.patch: hmac-sha384 and sha256
      ciphersuites were removed from defaults in lib/gnutls_priority.c,
      tests/priorities.c.
    - debian/patches/CVE-2018-1084x-5.patch: fix test for SHA512 in
      tests/pkcs12_encode.c.
    - CVE-2018-10844
    - CVE-2018-10845
    - CVE-2018-10846

Author: Julian Andres Klode
Author Date: 2019-01-21 07:56:16 UTC

Import patches-applied version 3.6.4-2ubuntu1.1 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: c77115f7cec5f49e650981f453c29715c3a779d4
Unapplied parent: 401945d1dc961c6d4508997db8bbc9c212071a33

New changelog entries:
  * gnutls-3.6.4-fix-rehandshake.patch: Fix rehandshake breaking glib
    stuff (LP: #1804673)

Author: Julian Andres Klode
Author Date: 2019-01-21 07:56:16 UTC

Import patches-unapplied version 3.6.4-2ubuntu1.1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 178cdee684193ffb5f066e124a1212df738275c0

New changelog entries:
  * gnutls-3.6.4-fix-rehandshake.patch: Fix rehandshake breaking glib
    stuff (LP: #1804673)

Author: Julian Andres Klode
Author Date: 2018-12-18 16:24:06 UTC

Import patches-applied version 3.6.5-2ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 32421bffdd525ede7d7b5529e4aa56655b6eaec0
Unapplied parent: 9b4a4cd38bb339ffa38ae0111528adb33485e93f

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl
  * this is a new upstream release including a fix for LP: #1804673

Author: Julian Andres Klode
Author Date: 2018-12-18 16:24:06 UTC

Import patches-applied version 3.6.5-2ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 32421bffdd525ede7d7b5529e4aa56655b6eaec0
Unapplied parent: 9b4a4cd38bb339ffa38ae0111528adb33485e93f

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl
  * this is a new upstream release including a fix for LP: #1804673

Author: Julian Andres Klode
Author Date: 2018-12-18 16:24:06 UTC

Import patches-unapplied version 3.6.5-2ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: a3cf48bc036aa163e3b875687663326291c49b85

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl
  * this is a new upstream release including a fix for LP: #1804673

Author: Julian Andres Klode
Author Date: 2018-12-18 16:24:06 UTC

Import patches-unapplied version 3.6.5-2ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: a3cf48bc036aa163e3b875687663326291c49b85

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl
  * this is a new upstream release including a fix for LP: #1804673

Author: Andreas Metzler
Author Date: 2018-10-06 12:06:18 UTC

Import patches-applied version 3.5.8-5+deb9u4 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 7eafeb0174657fbe19c8d3bf5425ff3f62bed820
Unapplied parent: 2db422ef37d09a7642ccdec9a6d1888a13e9bcd0

New changelog entries:
  * Pull fixes for CVE-2018-10844 and CVE-2018-10845 from gnutls 3.5.19
    + 39_01-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    + 39_02-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    + 39_03-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    + 39_04-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
    + 39_05-tests-pkcs12_encode-fix-test-for-SHA512.patch

Author: Andreas Metzler
Author Date: 2018-10-06 12:06:18 UTC

Import patches-unapplied version 3.5.8-5+deb9u4 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: f11fa8ea602de067bcde8481bd85e2da5b669613

New changelog entries:
  * Pull fixes for CVE-2018-10844 and CVE-2018-10845 from gnutls 3.5.19
    + 39_01-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    + 39_02-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    + 39_03-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    + 39_04-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
    + 39_05-tests-pkcs12_encode-fix-test-for-SHA512.patch

Author: Dimitri John Ledkov
Author Date: 2018-10-05 16:12:04 UTC

Import patches-applied version 3.6.4-2ubuntu1 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 9843eb277179f0efbe663ccf7a1436412ed72189
Unapplied parent: df1fc1434bf9e3a97d0a545a2890643fc4b8f6ea

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl
  * 0001-Skip-tests-tls13-prf.c-if-visibility-protected-doesn.patch:
    cherrypick upstream patch to fix test-suite with symbolic-functions
  * This upstream release includes TLS 1.3 support.

Author: Dimitri John Ledkov
Author Date: 2018-10-05 16:12:04 UTC

Import patches-unapplied version 3.6.4-2ubuntu1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: b5555e1d73837979b7c727d9a0cd85343eb7bfab

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl
  * 0001-Skip-tests-tls13-prf.c-if-visibility-protected-doesn.patch:
    cherrypick upstream patch to fix test-suite with symbolic-functions
  * This upstream release includes TLS 1.3 support.

Author: Anders Kaseorg
Author Date: 2018-01-17 21:23:47 UTC

Import patches-applied version 3.2.11-2ubuntu1.2 to applied/ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 36f99e3c6b96a0dc6ff8e6069973c4c93c07422a
Unapplied parent: 5a5ad35ba48d4c2e6f0e2e9dbf89b3259e78c29a

New changelog entries:
  * debian/patches/check_same_certificate_not_only_issuer.patch: when
    verifying, check for the same certificate in the trusted list,
    not only the issuer.
  * debian/patches/compare_ca_name_and_key.patch: when comparing a CA
    certificate with the trusted list, compare the name and key.
    (LP: #1722411)

Author: Anders Kaseorg
Author Date: 2018-01-17 21:23:47 UTC

Import patches-applied version 3.2.11-2ubuntu1.2 to applied/ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 36f99e3c6b96a0dc6ff8e6069973c4c93c07422a
Unapplied parent: 5a5ad35ba48d4c2e6f0e2e9dbf89b3259e78c29a

New changelog entries:
  * debian/patches/check_same_certificate_not_only_issuer.patch: when
    verifying, check for the same certificate in the trusted list,
    not only the issuer.
  * debian/patches/compare_ca_name_and_key.patch: when comparing a CA
    certificate with the trusted list, compare the name and key.
    (LP: #1722411)

Author: Anders Kaseorg
Author Date: 2018-01-17 21:23:47 UTC

Import patches-applied version 3.2.11-2ubuntu1.2 to applied/ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 36f99e3c6b96a0dc6ff8e6069973c4c93c07422a
Unapplied parent: 5a5ad35ba48d4c2e6f0e2e9dbf89b3259e78c29a

New changelog entries:
  * debian/patches/check_same_certificate_not_only_issuer.patch: when
    verifying, check for the same certificate in the trusted list,
    not only the issuer.
  * debian/patches/compare_ca_name_and_key.patch: when comparing a CA
    certificate with the trusted list, compare the name and key.
    (LP: #1722411)

Author: Anders Kaseorg
Author Date: 2018-01-17 21:23:47 UTC

Import patches-unapplied version 3.2.11-2ubuntu1.2 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 35724104cb2dabe4c6a8891e23ea512fdab8dbab

New changelog entries:
  * debian/patches/check_same_certificate_not_only_issuer.patch: when
    verifying, check for the same certificate in the trusted list,
    not only the issuer.
  * debian/patches/compare_ca_name_and_key.patch: when comparing a CA
    certificate with the trusted list, compare the name and key.
    (LP: #1722411)

Author: Anders Kaseorg
Author Date: 2018-01-17 21:23:47 UTC

Import patches-unapplied version 3.2.11-2ubuntu1.2 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 35724104cb2dabe4c6a8891e23ea512fdab8dbab

New changelog entries:
  * debian/patches/check_same_certificate_not_only_issuer.patch: when
    verifying, check for the same certificate in the trusted list,
    not only the issuer.
  * debian/patches/compare_ca_name_and_key.patch: when comparing a CA
    certificate with the trusted list, compare the name and key.
    (LP: #1722411)

Author: Anders Kaseorg
Author Date: 2018-01-17 21:23:47 UTC

Import patches-unapplied version 3.2.11-2ubuntu1.2 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 35724104cb2dabe4c6a8891e23ea512fdab8dbab

New changelog entries:
  * debian/patches/check_same_certificate_not_only_issuer.patch: when
    verifying, check for the same certificate in the trusted list,
    not only the issuer.
  * debian/patches/compare_ca_name_and_key.patch: when comparing a CA
    certificate with the trusted list, compare the name and key.
    (LP: #1722411)

Author: Ubuntu Git Importer
Author Date: 2018-03-15 17:34:41 UTC

pristine-tar data for gnutls28_3.5.18.orig.tar.xz

Author: Julian Andres Klode
Author Date: 2018-03-12 10:12:59 UTC

Import patches-applied version 3.5.18-1ubuntu1 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c08a02bb40389639ee13b52518aaa41ec5f70abf
Unapplied parent: 7717c8954d68a18afbdc54217cd7cde6f07f030f

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl

Author: Julian Andres Klode
Author Date: 2018-03-12 10:12:59 UTC

Import patches-unapplied version 3.5.18-1ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c36d7a3c56721880f087e5ae29bbb519cc5ed3a3

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl

Author: Julian Andres Klode
Author Date: 2018-03-12 10:12:59 UTC

Import patches-unapplied version 3.5.18-1ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c36d7a3c56721880f087e5ae29bbb519cc5ed3a3

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl

Author: Julian Andres Klode
Author Date: 2018-03-12 10:12:59 UTC

Import patches-applied version 3.5.18-1ubuntu1 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c08a02bb40389639ee13b52518aaa41ec5f70abf
Unapplied parent: 7717c8954d68a18afbdc54217cd7cde6f07f030f

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl

Author: Ubuntu Git Importer
Author Date: 2018-03-07 12:56:08 UTC

pristine-tar data for gnutls28_3.6.2.orig.tar.xz

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-unapplied version 3.5.6-4ubuntu4.3 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 0d428039732e29d815a2190fde65b0fe951be501

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-applied version 3.5.6-4ubuntu4.3 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 7aac76a96826608aa4d73f6c2bc853b91249fda6
Unapplied parent: b46efa917e3348ddc0788a27ffcc2da04a929302

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-unapplied version 3.5.6-4ubuntu4.3 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 0d428039732e29d815a2190fde65b0fe951be501

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-applied version 3.5.6-4ubuntu4.3 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 7aac76a96826608aa4d73f6c2bc853b91249fda6
Unapplied parent: b46efa917e3348ddc0788a27ffcc2da04a929302

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-applied version 3.5.6-4ubuntu4.3 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 7aac76a96826608aa4d73f6c2bc853b91249fda6
Unapplied parent: b46efa917e3348ddc0788a27ffcc2da04a929302

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-unapplied version 3.5.6-4ubuntu4.3 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 0d428039732e29d815a2190fde65b0fe951be501

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-unapplied version 3.5.8-6ubuntu3 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 4467c255d51b6407fd3173aaa0e1343214f5aee3

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-applied version 3.5.8-6ubuntu3 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 24dbbd093433808919f4d3e68aa049ea211c45e9
Unapplied parent: 3ea7df4c58fd5966a57e6ee5847cd39034d52a77

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-unapplied version 3.5.8-6ubuntu3 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 4467c255d51b6407fd3173aaa0e1343214f5aee3

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-applied version 3.5.8-6ubuntu3 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 24dbbd093433808919f4d3e68aa049ea211c45e9
Unapplied parent: 3ea7df4c58fd5966a57e6ee5847cd39034d52a77

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-applied version 3.5.8-6ubuntu3 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 24dbbd093433808919f4d3e68aa049ea211c45e9
Unapplied parent: 3ea7df4c58fd5966a57e6ee5847cd39034d52a77

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Julian Andres Klode
Author Date: 2017-09-02 14:12:49 UTC

Import patches-unapplied version 3.5.8-6ubuntu3 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 4467c255d51b6407fd3173aaa0e1343214f5aee3

New changelog entries:
  * Cherry pick several fixes from Debian 3.5.8-5+deb9u3:
    - 38_01-OCSP-check-the-subject-public-key-identifier-field-t.patch
      38_02-OCSP-find_signercert-improved-DER-length-calculation.patch from
      gnutls 3.5.14: Fix OCSP verification errors, especially with ecdsa
      signatures. LP: #1714506
    - 37_aarch64-fix-AES-GCM-in-place-encryption-and-decrypti.patch from
      upstream 3.5.x branch: Fix breakage if AES-GCM in-place encryption and
      decryption on aarch64. LP: #1707172

Author: Simon Déziel
Author Date: 2017-08-07 23:04:43 UTC

Import patches-applied version 3.4.10-4ubuntu1.4 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: ea2cb6bb7e614778a91e158b6f42cdc57459de59
Unapplied parent: ae77478048692159e6a5f0d6f2ed5a55a7b168e3

New changelog entries:
  * use_normal_priority_for_openssl_sslv23.diff by Andreas Metzler:
    OpenSSL wrapper: SSLv23_*_method translates to NORMAL GnuTLS priority,
    which includes TLS1.2 support. (LP: #1709193)

Author: Simon Déziel
Author Date: 2017-08-07 23:04:43 UTC

Import patches-unapplied version 3.4.10-4ubuntu1.4 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: e983564bf7ac96fc0cc611af437139e25743e7c1

New changelog entries:
  * use_normal_priority_for_openssl_sslv23.diff by Andreas Metzler:
    OpenSSL wrapper: SSLv23_*_method translates to NORMAL GnuTLS priority,
    which includes TLS1.2 support. (LP: #1709193)

Author: Andreas Metzler
Author Date: 2017-06-24 15:50:21 UTC

Import patches-unapplied version 3.3.8-6+deb8u7 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 0067c5d054da8d830751c75f74bceb9485587d16

New changelog entries:
  * 57_urandom-use-st_ino-and-st_rdev-to-determine-device-u.patch from
    upstream gnutls_3_3_x branch: Improve check for /dev/urandom uniqueness.
    Ensure that when gnutls_global_init() is called for a second time that
    /dev/urandom is re-opened when the inode or device ID has changed.
    Closes: #865297
  * 56_CVE-2017-7507_1-ext-status_request-ensure-response-IDs-are-pro.patch
    56_CVE-2017-7507_2-ext-status_request-Removed-the-parsing-of-resp.patch
    56_CVE-2017-7507_3-gnutls_ocsp_status_request_enable_client-docum.patch
    from upstream gnutls_3_3_x branch: Fix crash upon receiving
    well-formed status_request extension. GNUTLS-SA-2017-4/CVE-2017-7507
    Closes: #864560

Author: Andreas Metzler
Author Date: 2017-06-24 15:50:21 UTC

Import patches-applied version 3.3.8-6+deb8u7 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: 44b148476c5cb081a0c42961c69d5f8501547550
Unapplied parent: abb79f36a51af1b5ffd53d297a4a1a04dbd4751e

New changelog entries:
  * 57_urandom-use-st_ino-and-st_rdev-to-determine-device-u.patch from
    upstream gnutls_3_3_x branch: Improve check for /dev/urandom uniqueness.
    Ensure that when gnutls_global_init() is called for a second time that
    /dev/urandom is re-opened when the inode or device ID has changed.
    Closes: #865297
  * 56_CVE-2017-7507_1-ext-status_request-ensure-response-IDs-are-pro.patch
    56_CVE-2017-7507_2-ext-status_request-Removed-the-parsing-of-resp.patch
    56_CVE-2017-7507_3-gnutls_ocsp_status_request_enable_client-docum.patch
    from upstream gnutls_3_3_x branch: Fix crash upon receiving
    well-formed status_request extension. GNUTLS-SA-2017-4/CVE-2017-7507
    Closes: #864560

Author: Marc Deslauriers
Author Date: 2017-06-12 13:31:08 UTC

Import patches-unapplied version 3.5.3-5ubuntu1.2 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: cf82ef319193604d5416ae568b69d017cfcb1aa2

New changelog entries:
  * SECURITY UPDATE: null pointer dereference via status response TLS
    extension decoding
    - debian/patches/CVE-2017-7507-1.patch: ensure response IDs are
      properly deinitialized in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-2.patch: remove parsing of responder IDs
      from client extension in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-3.patch: documented requirements for
      parameters in lib/ext/status_request.c.
    - CVE-2017-7507
  * SECURITY UPDATE: DoS and possible code execution via OpenPGP
    certificate decoding
    - debian/patches/CVE-2017-7869.patch: enforce packet limits in
      lib/opencdk/read-packet.c.
    - CVE-2017-7869

Author: Marc Deslauriers
Author Date: 2017-06-12 13:26:39 UTC

Import patches-applied version 3.5.6-4ubuntu4.1 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 8d5202838bcc3c1353c2010bec8884f97372e3fa
Unapplied parent: 8dfe139b904cacfe361ec3e007b82f35fb2685b5

New changelog entries:
  * SECURITY UPDATE: null pointer dereference via status response TLS
    extension decoding
    - debian/patches/CVE-2017-7507-1.patch: ensure response IDs are
      properly deinitialized in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-2.patch: remove parsing of responder IDs
      from client extension in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-3.patch: documented requirements for
      parameters in lib/ext/status_request.c.
    - CVE-2017-7507
  * SECURITY UPDATE: DoS and possible code execution via OpenPGP
    certificate decoding
    - debian/patches/CVE-2017-7869.patch: enforce packet limits in
      lib/opencdk/read-packet.c.
    - CVE-2017-7869

Author: Marc Deslauriers
Author Date: 2017-06-12 13:31:08 UTC

Import patches-unapplied version 3.5.3-5ubuntu1.2 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: cf82ef319193604d5416ae568b69d017cfcb1aa2

New changelog entries:
  * SECURITY UPDATE: null pointer dereference via status response TLS
    extension decoding
    - debian/patches/CVE-2017-7507-1.patch: ensure response IDs are
      properly deinitialized in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-2.patch: remove parsing of responder IDs
      from client extension in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-3.patch: documented requirements for
      parameters in lib/ext/status_request.c.
    - CVE-2017-7507
  * SECURITY UPDATE: DoS and possible code execution via OpenPGP
    certificate decoding
    - debian/patches/CVE-2017-7869.patch: enforce packet limits in
      lib/opencdk/read-packet.c.
    - CVE-2017-7869

Author: Marc Deslauriers
Author Date: 2017-06-12 13:31:08 UTC

Import patches-applied version 3.5.3-5ubuntu1.2 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 9aa11b0d6bf40338baf042c9589badd9b2a2f7ba
Unapplied parent: e40375640adc903ab014f759953c712cf768472e

New changelog entries:
  * SECURITY UPDATE: null pointer dereference via status response TLS
    extension decoding
    - debian/patches/CVE-2017-7507-1.patch: ensure response IDs are
      properly deinitialized in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-2.patch: remove parsing of responder IDs
      from client extension in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-3.patch: documented requirements for
      parameters in lib/ext/status_request.c.
    - CVE-2017-7507
  * SECURITY UPDATE: DoS and possible code execution via OpenPGP
    certificate decoding
    - debian/patches/CVE-2017-7869.patch: enforce packet limits in
      lib/opencdk/read-packet.c.
    - CVE-2017-7869

Author: Marc Deslauriers
Author Date: 2017-06-12 13:31:08 UTC

Import patches-unapplied version 3.5.3-5ubuntu1.2 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: cf82ef319193604d5416ae568b69d017cfcb1aa2

New changelog entries:
  * SECURITY UPDATE: null pointer dereference via status response TLS
    extension decoding
    - debian/patches/CVE-2017-7507-1.patch: ensure response IDs are
      properly deinitialized in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-2.patch: remove parsing of responder IDs
      from client extension in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-3.patch: documented requirements for
      parameters in lib/ext/status_request.c.
    - CVE-2017-7507
  * SECURITY UPDATE: DoS and possible code execution via OpenPGP
    certificate decoding
    - debian/patches/CVE-2017-7869.patch: enforce packet limits in
      lib/opencdk/read-packet.c.
    - CVE-2017-7869

Author: Marc Deslauriers
Author Date: 2017-06-12 13:31:08 UTC

Import patches-applied version 3.5.3-5ubuntu1.2 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 9aa11b0d6bf40338baf042c9589badd9b2a2f7ba
Unapplied parent: e40375640adc903ab014f759953c712cf768472e

New changelog entries:
  * SECURITY UPDATE: null pointer dereference via status response TLS
    extension decoding
    - debian/patches/CVE-2017-7507-1.patch: ensure response IDs are
      properly deinitialized in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-2.patch: remove parsing of responder IDs
      from client extension in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-3.patch: documented requirements for
      parameters in lib/ext/status_request.c.
    - CVE-2017-7507
  * SECURITY UPDATE: DoS and possible code execution via OpenPGP
    certificate decoding
    - debian/patches/CVE-2017-7869.patch: enforce packet limits in
      lib/opencdk/read-packet.c.
    - CVE-2017-7869

Author: Marc Deslauriers
Author Date: 2017-06-12 13:26:39 UTC

Import patches-unapplied version 3.5.6-4ubuntu4.1 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 7bac8434ca201467d342fb827e2c70f00a61efcf

New changelog entries:
  * SECURITY UPDATE: null pointer dereference via status response TLS
    extension decoding
    - debian/patches/CVE-2017-7507-1.patch: ensure response IDs are
      properly deinitialized in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-2.patch: remove parsing of responder IDs
      from client extension in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-3.patch: documented requirements for
      parameters in lib/ext/status_request.c.
    - CVE-2017-7507
  * SECURITY UPDATE: DoS and possible code execution via OpenPGP
    certificate decoding
    - debian/patches/CVE-2017-7869.patch: enforce packet limits in
      lib/opencdk/read-packet.c.
    - CVE-2017-7869

Author: Marc Deslauriers
Author Date: 2017-06-12 13:31:08 UTC

Import patches-applied version 3.5.3-5ubuntu1.2 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 9aa11b0d6bf40338baf042c9589badd9b2a2f7ba
Unapplied parent: e40375640adc903ab014f759953c712cf768472e

New changelog entries:
  * SECURITY UPDATE: null pointer dereference via status response TLS
    extension decoding
    - debian/patches/CVE-2017-7507-1.patch: ensure response IDs are
      properly deinitialized in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-2.patch: remove parsing of responder IDs
      from client extension in lib/ext/status_request.c.
    - debian/patches/CVE-2017-7507-3.patch: documented requirements for
      parameters in lib/ext/status_request.c.
    - CVE-2017-7507
  * SECURITY UPDATE: DoS and possible code execution via OpenPGP
    certificate decoding
    - debian/patches/CVE-2017-7869.patch: enforce packet limits in
      lib/opencdk/read-packet.c.
    - CVE-2017-7869

Author: Marc Deslauriers
Author Date: 2017-04-05 14:06:24 UTC

Import patches-unapplied version 3.5.6-4ubuntu4 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: f3c51e9ff84137f5ad1641c93f13c85de38e7bce

New changelog entries:
  * Fix FTBFS because of failing test (LP: #1679868)
    - debian/patches/fix_tests_timezone.patch: address test suite failure
      due to timezone differences in tests/cert-tests/pkcs7.

Author: Marc Deslauriers
Author Date: 2017-04-05 14:06:24 UTC

Import patches-applied version 3.5.6-4ubuntu4 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: bedb54945c14ff8033bbc55ade677510869b443c
Unapplied parent: dc91cfc246c0620b17140d47886ae26850c3f97d

New changelog entries:
  * Fix FTBFS because of failing test (LP: #1679868)
    - debian/patches/fix_tests_timezone.patch: address test suite failure
      due to timezone differences in tests/cert-tests/pkcs7.

Author: Anders Kaseorg
Author Date: 2016-09-18 12:03:47 UTC

Import patches-applied version 3.5.3-5ubuntu1 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 5a3255919344c930beb4e995656cb4305058ad97
Unapplied parent: 3d14fefaa8dd3ef9f0e2fb8a8b52f586375430ac

New changelog entries:
  * Merge with Debian (LP: #1624856). Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable failing
      test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl

Author: Anders Kaseorg
Author Date: 2016-09-18 12:03:47 UTC

Import patches-unapplied version 3.5.3-5ubuntu1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 2828c797bbbef08fd7ace88bf386be50a66fa000

New changelog entries:
  * Merge with Debian (LP: #1624856). Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable failing
      test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl

Author: Anders Kaseorg
Author Date: 2016-09-18 12:03:47 UTC

Import patches-applied version 3.5.3-5ubuntu1 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 5a3255919344c930beb4e995656cb4305058ad97
Unapplied parent: 3d14fefaa8dd3ef9f0e2fb8a8b52f586375430ac

New changelog entries:
  * Merge with Debian (LP: #1624856). Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable failing
      test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl

Author: Anders Kaseorg
Author Date: 2016-09-18 12:03:47 UTC

Import patches-unapplied version 3.5.3-5ubuntu1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 2828c797bbbef08fd7ace88bf386be50a66fa000

New changelog entries:
  * Merge with Debian (LP: #1624856). Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable failing
      test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl

Author: Matthias Klose
Author Date: 2016-03-21 13:53:18 UTC

Import patches-unapplied version 3.4.10-4ubuntu1 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 5033f601029d1e7ec3c000c33d4e94976c5bce76

New changelog entries:
  * Merge with Debian; remaining changes:
    - Make gnutls28 default.
    - debian/patches/disable_global_init_override_test.patch: disable failing
      test.

Author: Matthias Klose
Author Date: 2016-03-21 13:53:18 UTC

Import patches-applied version 3.4.10-4ubuntu1 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 9e40d84c90215e52492a02ba5b78e1c74996c5bd
Unapplied parent: ae1cebd747cc66206e1a45340133a7147ab24b56

New changelog entries:
  * Merge with Debian; remaining changes:
    - Make gnutls28 default.
    - debian/patches/disable_global_init_override_test.patch: disable failing
      test.

Author: Marc Deslauriers
Author Date: 2016-01-07 15:34:56 UTC

Import patches-unapplied version 3.3.8-3ubuntu3.2 to ubuntu/vivid-security

Imported using git-ubuntu import.

Changelog parent: 8cf379081bb54b24015919bbec7c3928ceb3d542

New changelog entries:
  * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2
    - debian/patches/CVE-2015-7575.patch: properly set value in
      auth/cert.c, do not consider any values from the extension data to
      decide acceptable algorithms in lib/ext/signature.c, added test to
      tests/Makefile.am, tests/sign-md5-rep.c.
    - CVE-2015-7575

Author: Marc Deslauriers
Author Date: 2016-01-07 15:34:56 UTC

Import patches-unapplied version 3.3.8-3ubuntu3.2 to ubuntu/vivid-security

Imported using git-ubuntu import.

Changelog parent: 8cf379081bb54b24015919bbec7c3928ceb3d542

New changelog entries:
  * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2
    - debian/patches/CVE-2015-7575.patch: properly set value in
      auth/cert.c, do not consider any values from the extension data to
      decide acceptable algorithms in lib/ext/signature.c, added test to
      tests/Makefile.am, tests/sign-md5-rep.c.
    - CVE-2015-7575

Author: Marc Deslauriers
Author Date: 2016-01-07 15:34:56 UTC

Import patches-applied version 3.3.8-3ubuntu3.2 to applied/ubuntu/vivid-security

Imported using git-ubuntu import.

Changelog parent: 0ab78ef3461ecb9ccb0eb3b583961bbab0286f03
Unapplied parent: 9520f31f017f5914d8ecf2b5e509ba0d8e83a684

New changelog entries:
  * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2
    - debian/patches/CVE-2015-7575.patch: properly set value in
      auth/cert.c, do not consider any values from the extension data to
      decide acceptable algorithms in lib/ext/signature.c, added test to
      tests/Makefile.am, tests/sign-md5-rep.c.
    - CVE-2015-7575

Author: Marc Deslauriers
Author Date: 2016-01-07 15:34:56 UTC

Import patches-applied version 3.3.8-3ubuntu3.2 to applied/ubuntu/vivid-security

Imported using git-ubuntu import.

Changelog parent: 0ab78ef3461ecb9ccb0eb3b583961bbab0286f03
Unapplied parent: 9520f31f017f5914d8ecf2b5e509ba0d8e83a684

New changelog entries:
  * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2
    - debian/patches/CVE-2015-7575.patch: properly set value in
      auth/cert.c, do not consider any values from the extension data to
      decide acceptable algorithms in lib/ext/signature.c, added test to
      tests/Makefile.am, tests/sign-md5-rep.c.
    - CVE-2015-7575

Author: Marc Deslauriers
Author Date: 2016-01-07 15:34:56 UTC

Import patches-applied version 3.3.8-3ubuntu3.2 to applied/ubuntu/vivid-security

Imported using git-ubuntu import.

Changelog parent: 0ab78ef3461ecb9ccb0eb3b583961bbab0286f03
Unapplied parent: 9520f31f017f5914d8ecf2b5e509ba0d8e83a684

New changelog entries:
  * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2
    - debian/patches/CVE-2015-7575.patch: properly set value in
      auth/cert.c, do not consider any values from the extension data to
      decide acceptable algorithms in lib/ext/signature.c, added test to
      tests/Makefile.am, tests/sign-md5-rep.c.
    - CVE-2015-7575

Author: Marc Deslauriers
Author Date: 2016-01-07 15:34:56 UTC

Import patches-unapplied version 3.3.8-3ubuntu3.2 to ubuntu/vivid-security

Imported using git-ubuntu import.

Changelog parent: 8cf379081bb54b24015919bbec7c3928ceb3d542

New changelog entries:
  * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2
    - debian/patches/CVE-2015-7575.patch: properly set value in
      auth/cert.c, do not consider any values from the extension data to
      decide acceptable algorithms in lib/ext/signature.c, added test to
      tests/Makefile.am, tests/sign-md5-rep.c.
    - CVE-2015-7575