ubuntu/+source/gnutls26:ubuntu/lucid-devel

Last commit made on 2015-03-23
Get this branch:
git clone -b ubuntu/lucid-devel https://git.launchpad.net/ubuntu/+source/gnutls26
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
ubuntu/lucid-devel
Repository:
lp:ubuntu/+source/gnutls26

Recent commits

1ec5d6c... by Marc Deslauriers on 2015-03-20

Import patches-unapplied version 2.8.5-2ubuntu0.7 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 9731e7cd184f2d34b5728c30ad4bbcc5f98b76bf

New changelog entries:
  * SECURITY UPDATE: signature forgery issue
    - debian/patches/CVE-2015-0282.patch: make sure the signature
      algorithms match in lib/gnutls_algorithms.c, lib/gnutls_algorithms.h,
      lib/x509/privkey.c, lib/x509/verify.c, lib/x509/x509.c,
      lib/x509/x509_int.h.
    - CVE-2015-0282
  * SECURITY UPDATE: certificate algorithm consistency issue
    - debian/patches/CVE-2015-0294.patch: make sure the two signature
      algorithms match on cert import in lib/x509/x509.c.
    - CVE-2015-0294
  * SECURITY UPDATE: missing date/time checks on CA certificates
    - debian/patches/CVE-2014-8155.patch: perform time verification on
      trusted certificate list in lib/includes/gnutls/x509.h,
      lib/x509/verify.c.
    - CVE-2014-8155

9731e7c... by Marc Deslauriers on 2014-06-01

Import patches-unapplied version 2.8.5-2ubuntu0.6 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: f96fd4726ebc4a8127bc09ecbcdbb95225146a37

New changelog entries:
  * SECURITY UPDATE: memory corruption due to server hello parsing
    - debian/patches/CVE-2014-3466.patch: validate session_id_len in
      lib/gnutls_handshake.c.
    - CVE-2014-3466

f96fd47... by Marc Deslauriers on 2014-03-03

Import patches-unapplied version 2.8.5-2ubuntu0.5 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 21ec6f456f482188f15ce88e9e46a5a7509d755d

New changelog entries:
  * SECURITY UPDATE: certificate validation bypass
    - debian/patches/CVE-2014-0092.patch: correct return codes in
      lib/x509/verify.c.
    - CVE-2014-0092

21ec6f4... by Marc Deslauriers on 2013-05-27

Import patches-unapplied version 2.8.5-2ubuntu0.4 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 30498ff51600c95e7f272fe70d82a522eea967fd

New changelog entries:
  * SECURITY UPDATE: denial of service via incorrect pad
    - debian/patches/CVE-2013-2116.patch: added sanity check in
      lib/gnutls_cipher.c.
    - CVE-2013-2116

30498ff... by Marc Deslauriers on 2013-02-25

Import patches-unapplied version 2.8.5-2ubuntu0.3 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 5c99c8e4200f1b561e19f35743c8b60479ccb2b7

New changelog entries:
  * SECURITY UPDATE: "Lucky Thirteen" timing side-channel TLS attack
    - debian/patches/CVE-2013-1619.patch: avoid timing attacks in
      lib/gnutls_cipher.c, lib/gnutls_hash_int.h.
    - CVE-2013-1619

5c99c8e... by Thorsten Glaser on 2012-05-31

Import patches-unapplied version 2.8.5-2ubuntu0.2 to ubuntu/lucid-proposed

Imported using git-ubuntu import.

Changelog parent: 2efe1ecfe311c6fc2a825869d619895a030ad9d4

New changelog entries:
  * Apply upstream patch to fix validation of certificates when more than
    one with the same short hash exists in the CA bundle (LP: #1003841).

2efe1ec... by Tyler Hicks on 2012-04-04

Import patches-unapplied version 2.8.5-2ubuntu0.1 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: addd175efeafd97c4279b3220373f1d9fd753bf8

New changelog entries:
  * SECURITY UPDATE: Denial of service in client application
    - debian/patches/CVE-2011-4128.patch: Fix buffer bounds check when copying
      session data. Based on upstream patch.
    - CVE-2011-4128
  * SECURITY UPDATE: Denial of service via crafted TLS record
    - debian/patches/CVE-2012-1573.patch: Validate the size of a
      GenericBlockCipher structure as it is processed. Based on upstream
      patch.
    - CVE-2012-1573

addd175... by Andreas Metzler <email address hidden> on 2009-11-13

Import patches-unapplied version 2.8.5-2 to debian/squeeze

Imported using git-ubuntu import.

Changelog parent: 3ea93765b1ef302a17c8c8c9d986f29cd94689e7

New changelog entries:
  * Add a huge bunch of lintian overrides for the guile stuff to make dak
    happy.
  * Add datefudge to build-depends. (Only needed for the pkcs1-pad test.)
  * Switch to '3.0 (quilt)' source format, allowing us to use upstreams
    orig.tar.bz2 without repacking it to gz.
  * New upstream version.
    + Drop patches/20_fixtimebomb.diff.

3ea9376... by Andreas Metzler <email address hidden> on 2009-11-01

Import patches-unapplied version 2.8.4-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: b6604433b270ead2a6e272a51a102293fbaa1768

New changelog entries:
  * [20_fixtimebomb.diff] Fix testsuite error. Closes: #552920

b660443... by Andreas Metzler <email address hidden> on 2009-09-26

Import patches-unapplied version 2.8.4-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 4120826d4d766578b8027dd860830fb15cb70e6b

New changelog entries:
  * New upstream version.
    + Drop debian/patches/15_openpgp.diff.
  * Sync priorities with override file, libgnutls26 has been bumped from
    important to standard.