[ubuntu/eoan-proposed] gnutls28 3.6.7-2ubuntu1 (Accepted)

Julian Andres Klode juliank at ubuntu.com
Tue Apr 23 08:04:13 UTC 2019 

gnutls28 (3.6.7-2ubuntu1) eoan; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.
    - debian/patches/add-openssl-test-link.patch: add link for libssl

gnutls28 (3.6.7-2) unstable; urgency=medium

  * Upload to unstable.

gnutls28 (3.6.7-1) experimental; urgency=medium

  * New upstream version.
    + Update AUTHOR list in copyright file.
    + Update symbol file.
    + Fixes issue preventing sending and receiving from different
      threads when false start was enabled. Closes: #922879
    + gnutls-cli: fix --benchmark-ciphers type overflow. Closes: #920477
    + Fixes a memory corruption (double free) vulnerability in the
      certificate verification API.
      https://gitlab.com/gnutls/gnutls/issues/694 CVE-2019-3829
      GNUTLS-SA-2019-03-27
    + Fixes an invalid pointer access via malformed TLS1.3 async messages;
      https://gitlab.com/gnutls/gnutls/issues/704 CVE-2019-3836
      GNUTLS-SA-2019-03-27

gnutls28 (3.6.6-3) unstable; urgency=low

  * Add @ to autopkgtest's Depends.
  * Use DH 11 compat.

gnutls28 (3.6.6-2) unstable; urgency=low

  * Upload to unstable.

gnutls28 (3.6.6-1) experimental; urgency=low

  * New upstream version.
    + Fixes certtool.1 syntax. Closes: #920215
    + Includes m4/gtk-doc.m4 again, drop 40_add_missingm4.diff.
    + Update symbol file for released version.

gnutls28 (3.6.5+git20190105-1) experimental; urgency=low

  * New upstream snapshot 1626663a7cad198457066df044bdf6196469c8d6.
    + Update symbol and copyright file.
  * Delete autogen stamp-files on clean to enforce regeneration.

Date: Tue, 23 Apr 2019 09:59:19 +0200
Changed-By: Julian Andres Klode <juliank at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnutls28/3.6.7-2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 23 Apr 2019 09:59:19 +0200
Source: gnutls28
Architecture: source
Version: 3.6.7-2ubuntu1
Distribution: eoan
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Julian Andres Klode <juliank at ubuntu.com>
Closes: 920215 920477 922879
Changes:
 gnutls28 (3.6.7-2ubuntu1) eoan; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
     - debian/patches/disable_global_init_override_test.patch: disable
       failing test.
     - debian/patches/add-openssl-test-link.patch: add link for libssl
 .
 gnutls28 (3.6.7-2) unstable; urgency=medium
 .
   * Upload to unstable.
 .
 gnutls28 (3.6.7-1) experimental; urgency=medium
 .
   * New upstream version.
     + Update AUTHOR list in copyright file.
     + Update symbol file.
     + Fixes issue preventing sending and receiving from different
       threads when false start was enabled. Closes: #922879
     + gnutls-cli: fix --benchmark-ciphers type overflow. Closes: #920477
     + Fixes a memory corruption (double free) vulnerability in the
       certificate verification API.
       https://gitlab.com/gnutls/gnutls/issues/694 CVE-2019-3829
       GNUTLS-SA-2019-03-27
     + Fixes an invalid pointer access via malformed TLS1.3 async messages;
       https://gitlab.com/gnutls/gnutls/issues/704 CVE-2019-3836
       GNUTLS-SA-2019-03-27
 .
 gnutls28 (3.6.6-3) unstable; urgency=low
 .
   * Add @ to autopkgtest's Depends.
   * Use DH 11 compat.
 .
 gnutls28 (3.6.6-2) unstable; urgency=low
 .
   * Upload to unstable.
 .
 gnutls28 (3.6.6-1) experimental; urgency=low
 .
   * New upstream version.
     + Fixes certtool.1 syntax. Closes: #920215
     + Includes m4/gtk-doc.m4 again, drop 40_add_missingm4.diff.
     + Update symbol file for released version.
 .
 gnutls28 (3.6.5+git20190105-1) experimental; urgency=low
 .
   * New upstream snapshot 1626663a7cad198457066df044bdf6196469c8d6.
     + Update symbol and copyright file.
   * Delete autogen stamp-files on clean to enforce regeneration.
Checksums-Sha1:
 5e35825f001b9acc5282f810b768b106d7c8be9a 3464 gnutls28_3.6.7-2ubuntu1.dsc
 71f73b9829e44c947bb668b25b8b2e594a065345 8153728 gnutls28_3.6.7.orig.tar.xz
 5911d8f00c70e65d27f8d5244c37ae3b04b6cae7 534 gnutls28_3.6.7.orig.tar.xz.asc
 7ab0fd3d8193071b117ca811553184455b799972 68584 gnutls28_3.6.7-2ubuntu1.debian.tar.xz
 69a02d9dbdc302e014e77100d2c1b5278b791de5 7565 gnutls28_3.6.7-2ubuntu1_source.buildinfo
Checksums-Sha256:
 5991d5060c01aee36204d3cdffa01790f4cceead060448d27992335f00ce6d10 3464 gnutls28_3.6.7-2ubuntu1.dsc
 5b3409ad5aaf239808730d1ee12fdcd148c0be00262c7edf157af655a8a188e2 8153728 gnutls28_3.6.7.orig.tar.xz
 a14d0a7b9295b65ae797a70f8e765024a2e363dca03d008bfce0aec2b3f292b0 534 gnutls28_3.6.7.orig.tar.xz.asc
 e229dc12766b36252ab0e4784f97b3a0466352e84766c6c453eaa5b44e30bdde 68584 gnutls28_3.6.7-2ubuntu1.debian.tar.xz
 a22525b63e4334e332bdab804a49a3292485d3f92a1b6596bb8dc5f96d460f75 7565 gnutls28_3.6.7-2ubuntu1_source.buildinfo
Files:
 bd8fce83d49fc520405b52a0c37db3e6 3464 libs optional gnutls28_3.6.7-2ubuntu1.dsc
 c4ac669c500df939d4fbfea722367929 8153728 libs optional gnutls28_3.6.7.orig.tar.xz
 13b4d4d680c451c29129191ae9250529 534 libs optional gnutls28_3.6.7.orig.tar.xz.asc
 ea6154dc3f2c04cfef1341e2e0a7fd36 68584 libs optional gnutls28_3.6.7-2ubuntu1.debian.tar.xz
 118ca6201bd8f58f0f64b6bb204e88bf 7565 libs optional gnutls28_3.6.7-2ubuntu1_source.buildinfo
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----

iQJHBAEBCgAxFiEET7WIqEwt3nmnTHeHb6RY3R2wP3EFAly+xnETHGp1bGlhbmtA
dWJ1bnR1LmNvbQAKCRBvpFjdHbA/cZx5D/4+XE3TK8zihz/mJmpvwYlzpvp8H0SK
nPL5ZyfDA1yRr+Sc7scnzWGlD88gVmJ3817Xy/uM9az/xNbkJvYRtadHOd6v1M7V
yUvW93vgRXYyLZF2JBjbdfdvMowHXvRIABMSousH2nGED5WAXr9ST7Beshjac7R2
HJqvxpKdv8Yg8e1CUato6+vuT+fJkRxJherhInBNapjgY1vdxL6y2hhnyirLHhaZ
3CXv7CXsZrTBjQBeZWE6Hp9WplX6rgdmEKFcPLyHnKhsdrZVG7ZCT5GNUWOo+PR6
dE1Ke1WbA1N0XJJLDoJEy981EY5tpGhwBoQGgq9fc31IwH7GNiuq4S7lx4RAx2GF
LPqlUxtVRZv+8nKtathT+eyeo7Sz5TNPddZDm403G0vvhOneDrQKSKaD6F4UKYsz
qz4EzNIjhJqtOVm6I9msEWW03WrEz/baLLd0v6as9Mm5iThjwoKnxgKMW7cptA2/
wqcoZpK6EpeB0B7NGVm/BFqEo1XXs4zNN/E+lM1SdZMRQdf7rpa1wD6+xpvoSlaF
/9IfmtaGNIkoPh4lZlzZJTZ3i9X2UyoT6KAcuSXhjRlzVYFAf+MxXUu+K5YvOhL7
uPw6yPiTU+VfRDv8kOQqXu9XsL21uVLJQQBSP4YSnpl/aX8OV/3c9ulokGED3Mfm
dAfqteIMzGjIog==
=cMAb
-----END PGP SIGNATURE-----

More information about the Eoan-changes mailing list