[ubuntu/vivid-proposed] gnutls26 2.12.23-18ubuntu1 (Accepted)
Adam Conrad
adconrad at ubuntu.com
Fri Mar 27 13:26:05 UTC 2015
gnutls26 (2.12.23-18ubuntu1) vivid; urgency=medium
* Merge with Debian; remaining changes:
- Link test-lock and test-thread_create with -Wl,--no-as-needed; see
https://lists.gnu.org/archive/html/bug-gnulib/2013-10/msg00017.html.
- debian/rules: Set CC on cross-builds, so autoconf doesn't lose its mind.
* Dropped changes:
- restore sipsak Breaks, ours is now new enough to deal with this.
- drop CVE-2014-3466 security upload, included in debian.
- debian/patches/99_update-libtool.patch: Debian uses autoreconf.
gnutls26 (2.12.23-18) experimental; urgency=medium
* 32_fix-gcrypt-private-api-usage.patch from gpg4win: Allow building
against libgcrypt20. (Thanks, Werner Koch for the pointer.)
* (Build-)depend on libgcrypt20-dev.
gnutls26 (2.12.23-17) unstable; urgency=medium
[ Mauricio Faria de Oliveira ]
* Add fixes for automake (30_fix_automake_oldies.patch).
* Run dh-autoreconf on build. (Closes: #751796)
[ Andreas Metzler ]
* 31_linkage-gpgerror.diff: Stop unnecessary linkage against libgpg-error
caused by buildung with up to date lib-link.m4.
gnutls26 (2.12.23-16) unstable; urgency=high
* Drop libgnutls26-dbg Conflicts with libgnutls13-dbg, libgnutls28-dbg.
These have been unnecessary since we started using dh compat v9, where
debugging symbols are installed to /usr/lib/debug/.build-id.
* 29_Prevent-memory-corruption.diff from upstream GIT. Fix memory corruption
on client side caused by specifically crafted ServerHello.
GNUTLS-SA-2014-3 / CVE-2014-3466
Date: Fri, 27 Mar 2015 07:07:15 -0600
Changed-By: Adam Conrad <adconrad at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnutls26/2.12.23-18ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 27 Mar 2015 07:07:15 -0600
Source: gnutls26
Binary: libgnutls-dev libgnutls26 libgnutls26-dbg gnutls26-doc libgnutlsxx27
Architecture: source
Version: 2.12.23-18ubuntu1
Distribution: vivid
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Adam Conrad <adconrad at ubuntu.com>
Description:
gnutls26-doc - GNU TLS library 2.x - documentation and examples
libgnutls-dev - GNU TLS library - development files
libgnutls26 - GNU TLS library - runtime library
libgnutls26-dbg - GNU TLS library - debugger symbols
libgnutlsxx27 - GNU TLS library - C++ runtime library
Closes: 751796
Changes:
gnutls26 (2.12.23-18ubuntu1) vivid; urgency=medium
.
* Merge with Debian; remaining changes:
- Link test-lock and test-thread_create with -Wl,--no-as-needed; see
https://lists.gnu.org/archive/html/bug-gnulib/2013-10/msg00017.html.
- debian/rules: Set CC on cross-builds, so autoconf doesn't lose its mind.
.
* Dropped changes:
- restore sipsak Breaks, ours is now new enough to deal with this.
- drop CVE-2014-3466 security upload, included in debian.
- debian/patches/99_update-libtool.patch: Debian uses autoreconf.
.
gnutls26 (2.12.23-18) experimental; urgency=medium
.
* 32_fix-gcrypt-private-api-usage.patch from gpg4win: Allow building
against libgcrypt20. (Thanks, Werner Koch for the pointer.)
* (Build-)depend on libgcrypt20-dev.
.
gnutls26 (2.12.23-17) unstable; urgency=medium
.
[ Mauricio Faria de Oliveira ]
* Add fixes for automake (30_fix_automake_oldies.patch).
* Run dh-autoreconf on build. (Closes: #751796)
.
[ Andreas Metzler ]
* 31_linkage-gpgerror.diff: Stop unnecessary linkage against libgpg-error
caused by buildung with up to date lib-link.m4.
.
gnutls26 (2.12.23-16) unstable; urgency=high
.
* Drop libgnutls26-dbg Conflicts with libgnutls13-dbg, libgnutls28-dbg.
These have been unnecessary since we started using dh compat v9, where
debugging symbols are installed to /usr/lib/debug/.build-id.
* 29_Prevent-memory-corruption.diff from upstream GIT. Fix memory corruption
on client side caused by specifically crafted ServerHello.
GNUTLS-SA-2014-3 / CVE-2014-3466
Checksums-Sha1:
f69c23c7e92286b431c1763fe07843385d61a1c4 2658 gnutls26_2.12.23-18ubuntu1.dsc
ac2d9b440d45a71d7bf8dedd9740e5cf3bde7332 33108 gnutls26_2.12.23-18ubuntu1.debian.tar.xz
Checksums-Sha256:
0e35bb14fa197aa9a5e970ba5250ab2abc68aa0eb1a7b33d355c2dc7990f8104 2658 gnutls26_2.12.23-18ubuntu1.dsc
82e8a0bcc2c463f8c74a16a7d91969a314aa6b17e09c4934a3d2795d44b4cb38 33108 gnutls26_2.12.23-18ubuntu1.debian.tar.xz
Files:
fecb0964d9489ce62d9e9a1776b4971c 2658 libs optional gnutls26_2.12.23-18ubuntu1.dsc
70a9096be93c70a96d5bffd2e1566ec9 33108 libs optional gnutls26_2.12.23-18ubuntu1.debian.tar.xz
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>
More information about the Vivid-changes
mailing list