-
978159b...
by
Tyler Hicks
on 2012-04-04
-
Import patches-unapplied version 2.8.6-1ubuntu2.1 to ubuntu/natty-security
Imported using git-ubuntu import.
Changelog parent: b3101e9fab6637e897619e9c468b5fee6a298c86
New changelog entries:
* SECURITY UPDATE: Denial of service in client application
- debian/patches/CVE-2011-4128.patch: Fix buffer bounds check when copying
session data. Based on upstream patch.
- CVE-2011-4128
* SECURITY UPDATE: Denial of service via crafted TLS record
- debian/patches/CVE-2012-1573.patch: Validate the size of a
GenericBlockCipher structure as it is processed. Based on upstream
patch.
- CVE-2012-1573
-
b3101e9...
by
Steve Langasek
on 2011-03-22
-
Import patches-unapplied version 2.8.6-1ubuntu2 to ubuntu/natty
Imported using git-ubuntu import.
Changelog parent: d83658e73cad482cf5a950179cc07c63c96caccd
New changelog entries:
* FFe LP: #733501: Build for multiarch.
-
d83658e...
by
Matthias Klose
on 2010-11-18
-
Import patches-unapplied version 2.8.6-1ubuntu1 to ubuntu/natty
Imported using git-ubuntu import.
Changelog parent: 6f39b49f19af47ac165fd6709a220dec4ebf5eee
New changelog entries:
* Fix build failure with --no-add-needed.
-
6f39b49...
by
Andreas Metzler <email address hidden>
on 2010-03-20
-
Import patches-unapplied version 2.8.6-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: addd175efeafd97c4279b3220373f1d9fd753bf8
New changelog entries:
* Use dh_lintian.
* Use dh_makeshlibs for the guile stuff, too. This gets us
a) ldconfig in postinst. Closes: #553109
and
b) a shlibs file.
However the shared objects /usr/lib/libguile-gnutls*so* are still not
designed to be used as libraries (linking) but are dlopened. guile-1.10
will address this issue by keeping this stuff in a private directory.
* hotfix pkg-config files (proper fix to be included upstream).
* Stop unneeeded linkage against libgpg-error. 16_unnecessarydep.diff
-
addd175...
by
Andreas Metzler <email address hidden>
on 2009-11-13
-
Import patches-unapplied version 2.8.5-2 to debian/squeeze
Imported using git-ubuntu import.
Changelog parent: 3ea93765b1ef302a17c8c8c9d986f29cd94689e7
New changelog entries:
* Add a huge bunch of lintian overrides for the guile stuff to make dak
happy.
* Add datefudge to build-depends. (Only needed for the pkcs1-pad test.)
* Switch to '3.0 (quilt)' source format, allowing us to use upstreams
orig.tar.bz2 without repacking it to gz.
* New upstream version.
+ Drop patches/20_fixtimebomb.diff.
-
3ea9376...
by
Andreas Metzler <email address hidden>
on 2009-11-01
-
Import patches-unapplied version 2.8.4-2 to debian/sid
Imported using git-ubuntu import.
Changelog parent: b6604433b270ead2a6e272a51a102293fbaa1768
New changelog entries:
* [20_fixtimebomb.diff] Fix testsuite error. Closes: #552920
-
b660443...
by
Andreas Metzler <email address hidden>
on 2009-09-26
-
Import patches-unapplied version 2.8.4-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 4120826d4d766578b8027dd860830fb15cb70e6b
New changelog entries:
* New upstream version.
+ Drop debian/patches/15_openpgp.diff.
* Sync priorities with override file, libgnutls26 has been bumped from
important to standard.
-
4120826...
by
Andreas Metzler <email address hidden>
on 2009-09-05
-
Import patches-unapplied version 2.8.3-3 to debian/sid
Imported using git-ubuntu import.
Changelog parent: bd4dcbca3a7d045b77287b6175f0cf67ba890944
New changelog entries:
* Empty dependency_libs in la-files. (Squeeze release goal.)
-
bd4dcbc...
by
Andreas Metzler <email address hidden>
on 2009-08-22
-
Import patches-unapplied version 2.8.3-2 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 85698c80bd630b92c170485b3829499fba7f61c9
New changelog entries:
* [ debian/patches/15_openpgp.diff ] The CVE-2009-2730 patch broke
openpgp connections.
-
85698c8...
by
Andreas Metzler <email address hidden>
on 2009-08-14
-
Import patches-unapplied version 2.8.3-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 0a24734df340c16ef5c4f78676767973e67bf175
New changelog entries:
* New upstream version.
+ Stops hardcoding a hard dependency on the versions of gcrypt and tasn it
was built against. Closes: #540449
+ Fixes CVE-2009-2730, a vulnerability related to NUL bytes in X.509
certificate name fields. Closes: #541439 GNUTLS-SA-2009-4
http://lists.gnu.org/archive/html/help-gnutls/2009-08/msg00011.html
* Drop 15_chainverify_expiredcert.diff, included upstream.
* Urgency high, since 541439 applies to testing, too.
