[ubuntu/eoan-proposed] gnutls28 3.6.7-4ubuntu1 (Accepted)

[Steve Langasek]

gnutls28 (3.6.7-4ubuntu1) eoan; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/patches/add-openssl-test-link.patch: add link for libssl
    - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
      letting it be assumed
  * Dropped changes, years old, never upstreamed, and presumed obsolete:
    - debian/patches/disable_global_init_override_test.patch: disable
      failing test.

gnutls28 (3.6.7-4) unstable; urgency=medium

  * Cherry-pick important bug-fixes from 3.6.8:
    + 40_rel3.6.8_01-gnutls_srp_entry_free-follow-consistent-behavior-in.patch
      The gnutls_srp_set_server_credentials_function can be used with the 8192
      parameters as well.
      https://gitlab.com/gnutls/gnutls/issues/761
    + 40_rel3.6.8_05-lib-nettle-fix-carry-flag-in-Streebog-code.patch
      Fix calculation of Streebog digests (incorrect carry operation in
      512 bit addition).
    + 40_rel3.6.8_10-ext-record_size_limit-distinguish-sending-and-receiv.patch
      Fix compatibility of GnuTLS 3.6.[456] server with GnuTLS 3.6.7 client.
      Closes: #929907
    + 40_rel3.6.8_15-Apply-STD3-ASCII-rules-in-gnutls_idna_map.patch
      Apply STD3 ASCII rules in gnutls_idna_map() to prevent hostname/domain
      crafting via IDNA conversion.
      https://gitlab.com/gnutls/gnutls/issues/720
    + 40_rel3.6.8_20-pubkey-remove-deprecated-TLS1_RSA-flag-check.patch
      Fixed bug preventing the use of gnutls_pubkey_verify_data2() and
      gnutls_pubkey_verify_hash2() with the GNUTLS_VERIFY_DISABLE_CA_SIGN
      flag.
      https://gitlab.com/gnutls/gnutls/issues/754

Date: Fri, 14 Jun 2019 13:15:25 -0700
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnutls28/3.6.7-4ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 14 Jun 2019 13:15:25 -0700
Source: gnutls28
Architecture: source
Version: 3.6.7-4ubuntu1
Distribution: eoan
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Closes: 929907
Changes:
 gnutls28 (3.6.7-4ubuntu1) eoan; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
     - debian/patches/add-openssl-test-link.patch: add link for libssl
     - set ac_cv_sizeof_time_t debian/tests/run-upstream-testsuite instead of
       letting it be assumed
   * Dropped changes, years old, never upstreamed, and presumed obsolete:
     - debian/patches/disable_global_init_override_test.patch: disable
       failing test.
 .
 gnutls28 (3.6.7-4) unstable; urgency=medium
 .
   * Cherry-pick important bug-fixes from 3.6.8:
     + 40_rel3.6.8_01-gnutls_srp_entry_free-follow-consistent-behavior-in.patch
       The gnutls_srp_set_server_credentials_function can be used with the 8192
       parameters as well.
       https://gitlab.com/gnutls/gnutls/issues/761
     + 40_rel3.6.8_05-lib-nettle-fix-carry-flag-in-Streebog-code.patch
       Fix calculation of Streebog digests (incorrect carry operation in
       512 bit addition).
     + 40_rel3.6.8_10-ext-record_size_limit-distinguish-sending-and-receiv.patch
       Fix compatibility of GnuTLS 3.6.[456] server with GnuTLS 3.6.7 client.
       Closes: #929907
     + 40_rel3.6.8_15-Apply-STD3-ASCII-rules-in-gnutls_idna_map.patch
       Apply STD3 ASCII rules in gnutls_idna_map() to prevent hostname/domain
       crafting via IDNA conversion.
       https://gitlab.com/gnutls/gnutls/issues/720
     + 40_rel3.6.8_20-pubkey-remove-deprecated-TLS1_RSA-flag-check.patch
       Fixed bug preventing the use of gnutls_pubkey_verify_data2() and
       gnutls_pubkey_verify_hash2() with the GNUTLS_VERIFY_DISABLE_CA_SIGN
       flag.
       https://gitlab.com/gnutls/gnutls/issues/754
Checksums-Sha1:
 5089d98bf799ed91d8ff8eab38944ab8d4906eb9 3466 gnutls28_3.6.7-4ubuntu1.dsc
 6439b00082b4d2974901214a790c1b74e8939ad1 74752 gnutls28_3.6.7-4ubuntu1.debian.tar.xz
 fe898b7163da9fc93c09e2a08cd84db0a68ef48e 6753 gnutls28_3.6.7-4ubuntu1_source.buildinfo
Checksums-Sha256:
 7502efb95a40037c84bb37d9debf64d5f6766b7903dc91f7ab101c79e63502ce 3466 gnutls28_3.6.7-4ubuntu1.dsc
 f190111d032e47875813370fe1896e4152837f8564e54527ce3be60dca18d4d5 74752 gnutls28_3.6.7-4ubuntu1.debian.tar.xz
 3c7507a096ecbda7a07481564eaeb527e4bb9afce40003a1a3e7ca9516a50af2 6753 gnutls28_3.6.7-4ubuntu1_source.buildinfo
Files:
 28445e286a46acb3071f1d69fcce7d81 3466 libs optional gnutls28_3.6.7-4ubuntu1.dsc
 0bf7c0b5e5180988ee9096c24e22aafc 74752 libs optional gnutls28_3.6.7-4ubuntu1.debian.tar.xz
 6f7fc92ecf4b280679066c64c81c22d8 6753 libs optional gnutls28_3.6.7-4ubuntu1_source.buildinfo
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=VR5P
-----END PGP SIGNATURE-----