[Bug 1929229] Re: Please merge gnutls28 3.7.1-4 (main) from Debian unstable

[Brian Murray]

gnutls28 (3.7.1-4ubuntu1) impish; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Enable CET.
    - Set default priority string to only allow TLS1.2, DTLS1.2, and
    TLS1.3 with medium security profile (2048 RSA keys minimum, and
    similar).
  * Fix FTBFS with lto - reduce parallelism to 2. LP: #1922004

gnutls28 (3.7.1-4) unstable; urgency=medium

  * Pull fixes from upstream Git master
    + Ensure array allocations overflow safe.
      https://gitlab.com/gnutls/gnutls/-/issues/1179
      56_15-mem-add-_gnutls_reallocarray-and-_gnutls_reallocarra.patch
      56_16-pkcs11x-find_ext_cb-fix-error-propagation.patch
      56_17-build-avoid-potential-integer-overflow-in-array-allo.patch
      56_18-build-avoid-integer-overflow-in-additions.patch
      56_19-_gnutls_calloc-remove-unused-function.patch
    + Add option to disable TLS 1.3 middlebox compatibility mode
      https://gitlab.com/gnutls/gnutls/-/issues/1208
      56_20-priority-add-option-to-disable-TLS-1.3-middlebox-com.patch
      (Changes gperf input file, add b-d on gperf.)
    + Fix session-id changing when responding to HelloRetryRequest
      56_24-handshake-don-t-regenerate-legacy_session_id-in-seco.patch
      https://gitlab.com/gnutls/gnutls/-/issues/1210
    + Fix timing of sending TLSv1.3 early data.
      56_28-handshake-fix-timing-of-sending-early-data.patch
      https://gitlab.com/gnutls/gnutls/-/issues/1146

 -- William 'jawn-smith' Wilson <william.wilson at canonical.com>  Fri, 21
May 2021 10:29:32 -0600

** Bug watch added: gitlab.com/gnutls/gnutls/-/issues #1179
   https://gitlab.com/gnutls/gnutls/-/issues/1179

** Bug watch added: gitlab.com/gnutls/gnutls/-/issues #1208
   https://gitlab.com/gnutls/gnutls/-/issues/1208

** Bug watch added: gitlab.com/gnutls/gnutls/-/issues #1210
   https://gitlab.com/gnutls/gnutls/-/issues/1210

** Bug watch added: gitlab.com/gnutls/gnutls/-/issues #1146
   https://gitlab.com/gnutls/gnutls/-/issues/1146

** Changed in: gnutls28 (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnutls28 in Ubuntu.
https://bugs.launchpad.net/bugs/1929229

Title:
  Please merge gnutls28 3.7.1-4 (main) from Debian unstable

Status in gnutls28 package in Ubuntu:
  Fix Released

Bug description:
  This requires a merge because there are changes in the Ubuntu version
  not present in the Debian version.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls28/+bug/1929229/+subscriptions