[ubuntu/xenial-proposed] gnutls28 3.4.9-2ubuntu1 (Accepted)

Wed Feb 17 20:11:16 UTC 2016

gnutls28 (3.4.9-2ubuntu1) xenial; urgency=medium

  * Merge with Debian; remaining changes:

gnutls28 (3.4.9-2) unstable; urgency=medium

  * Upload to unstable.

gnutls28 (3.4.9-1) experimental; urgency=medium

  * New upstream version.
  * Drop 35_Revert-Fix-out-of-bounds-read-in-gnutls_x509_ext_exp.patch and
    36_Revert-tests-updated-to-account-for-cert-generation.patch.

gnutls28 (3.4.8-3) unstable; urgency=medium

  * Pull 35_Revert-Fix-out-of-bounds-read-in-gnutls_x509_ext_exp.patch and
    36_Revert-tests-updated-to-account-for-cert-generation.patch
    from upstream GIT. Closes: #813243

gnutls28 (3.4.8-2) unstable; urgency=medium

  * Merge master branch into experimental.
    + Drop ancient Conflicts/Replaces: gnutls0, gnutls0.4.
    + libgnutls-deb0-28 temporarily Conflicts with libnettle4, libhogweed2.
      This is a kludge and technically wrong, but will prevent partial
      upgrades from stable. See: #788735
  * Upload to unstable.

gnutls28 (3.4.8-1) experimental; urgency=medium

  * Migrate from libgnutls30-dbg to ddebs. dh_strip's --ddeb-migration
    option was added to debhelper/unstable with version 9.20150628, bump
    build-dependency accordingly.
  * autoreconf requires automake 1.12.2, add build-dependency.
  * New upstream version.
    + Update symbol file.
  * Move Vcs-* from git/http to https.

gnutls28 (3.4.7-1) experimental; urgency=medium

  * New upstream version.
    + Update symbol file.

gnutls28 (3.4.6-1) experimental; urgency=medium

  * Make use of autogen's MAN_PAGE_DATE (available in version 5.18.6 and
    later) to improve reproducibility of build.
  * New upstream version.
    + Update symbol file.
  * Bump debhelper build-dependency to >= 9.20141010 and add b-d on dpkg-dev
    (>= 1.17.14). Both are required for build-profile support added in
    previous upload. (Thanks, lintian.)

gnutls28 (3.4.5-1) experimental; urgency=medium

  [ Helmut Grohne ]
  * Turn Build-Depends: datefudge optional via <!nocheck> profile.
    Closes: #797544

  [ Andreas Metzler ]
  * New upstream version.

gnutls28 (3.4.4.1-1) experimental; urgency=medium

  * New upstream version.
    + GNUTLS_PKCS11_OBJ_FLAG_NO_STORE_PUBKEY added to gnutls_pkcs11_obj_flags,
      bump dependency info for functions taking it as argument or returning it.
    + Bump dependency info on private symbols.
    + Update debian/copyright.
    + Fixes double free in DN decoding [GNUTLS-SA-2015-3]. Closes: #795068
      CVE-2015-6251

gnutls28 (3.4.3-1) experimental; urgency=medium

  * Re-enable libidn-support, use versioned b-d on libidn11-dev >= 1.31.
  * New upstream version.
    + Bump dependency info on gnutls_pkcs11_token_get_info due to changed enum
      gnutls_pkcs11_token_info_t.
    + Add dependency info for new symbols, bump private symbol dependency.

gnutls28 (3.4.2-2) experimental; urgency=medium

  * Disable libidn support because CVE-2015-2059 is still not fixed. See
    <https://gitlab.com/gnutls/gnutls/issues/10>. This also disables building
    of crywrap.

gnutls28 (3.4.2-1) experimental; urgency=medium

  * New upstream version.
    + Drop 50_updated-sign-md5-rep-to-reduce-false-failures.patch.
    + Update libgnutls30.symbols. (Add new fuctions, bump private symbol
      version, bump gnutls_init() due to newly added GNUTLS_NO_SIGNAL flag.)

gnutls28 (3.4.1-1) experimental; urgency=medium

  * New upstream version.
    + Bump (build)-depends on nettle and p11-kit.
    + Drop 20_debian_specific_soname.diff, 40_no_more_ssl3.diff and
      55_nettle3.patch.
    + Update 14_version_gettextcat.diff.
    + Soname bump, library package renamed from libgnutls-deb0-28 to
      libgnutls30.
    + OpenSSL compat layer is not built by default anymore, pass
      --enable-openssl-compatibility to ./configure.
    + Update symbol file.
    + libgnutls: priority strings VERS-TLS-ALL and VERS-DTLS-ALL are
      restricted to the corresponding protocols only, and the VERS-ALL
      string is introduced to catch all possible protocols. Closes: #773145
    + Since the pkg-config file gnutls.pc now lists libidn in Requires.private
      "pkg-config --exists gnutls" will fail if libidn.pc is not present. Add
      dependency on libidn11-dev to libgnutls28-dev.
  * Fix typo in debian/rules
    (s/-disable-silent-rules/--disable-silent-rules).

Date: Wed, 17 Feb 2016 20:47:48 +0100
Changed-By: Matthias Klose <doko at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnutls28/3.4.9-2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 17 Feb 2016 20:47:48 +0100
Source: gnutls28
Binary: libgnutls-dev libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc guile-gnutls libgnutlsxx28 libgnutls-openssl27
Architecture: source
Version: 3.4.9-2ubuntu1
Distribution: xenial
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Matthias Klose <doko at ubuntu.com>
Description:
 gnutls-bin - GNU TLS library - commandline utilities
 gnutls-doc - GNU TLS library - documentation and examples
 guile-gnutls - GNU TLS library - GNU Guile bindings
 libgnutls-dev - GNU TLS library - development files
 libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
 libgnutls28-dev - dummy transitional package for GNU TLS library - development file
 libgnutls30 - GNU TLS library - main runtime library
 libgnutlsxx28 - GNU TLS library - C++ runtime library
Closes: 773145 795068 797544 813243
Changes:
 gnutls28 (3.4.9-2ubuntu1) xenial; urgency=medium
 .
   * Merge with Debian; remaining changes:
 .
 gnutls28 (3.4.9-2) unstable; urgency=medium
 .
   * Upload to unstable.
 .
 gnutls28 (3.4.9-1) experimental; urgency=medium
 .
   * New upstream version.
   * Drop 35_Revert-Fix-out-of-bounds-read-in-gnutls_x509_ext_exp.patch and
     36_Revert-tests-updated-to-account-for-cert-generation.patch.
 .
 gnutls28 (3.4.8-3) unstable; urgency=medium
 .
   * Pull 35_Revert-Fix-out-of-bounds-read-in-gnutls_x509_ext_exp.patch and
     36_Revert-tests-updated-to-account-for-cert-generation.patch
     from upstream GIT. Closes: #813243
 .
 gnutls28 (3.4.8-2) unstable; urgency=medium
 .
   * Merge master branch into experimental.
     + Drop ancient Conflicts/Replaces: gnutls0, gnutls0.4.
     + libgnutls-deb0-28 temporarily Conflicts with libnettle4, libhogweed2.
       This is a kludge and technically wrong, but will prevent partial
       upgrades from stable. See: #788735
   * Upload to unstable.
 .
 gnutls28 (3.4.8-1) experimental; urgency=medium
 .
   * Migrate from libgnutls30-dbg to ddebs. dh_strip's --ddeb-migration
     option was added to debhelper/unstable with version 9.20150628, bump
     build-dependency accordingly.
   * autoreconf requires automake 1.12.2, add build-dependency.
   * New upstream version.
     + Update symbol file.
   * Move Vcs-* from git/http to https.
 .
 gnutls28 (3.4.7-1) experimental; urgency=medium
 .
   * New upstream version.
     + Update symbol file.
 .
 gnutls28 (3.4.6-1) experimental; urgency=medium
 .
   * Make use of autogen's MAN_PAGE_DATE (available in version 5.18.6 and
     later) to improve reproducibility of build.
   * New upstream version.
     + Update symbol file.
   * Bump debhelper build-dependency to >= 9.20141010 and add b-d on dpkg-dev
     (>= 1.17.14). Both are required for build-profile support added in
     previous upload. (Thanks, lintian.)
 .
 gnutls28 (3.4.5-1) experimental; urgency=medium
 .
   [ Helmut Grohne ]
   * Turn Build-Depends: datefudge optional via <!nocheck> profile.
     Closes: #797544
 .
   [ Andreas Metzler ]
   * New upstream version.
 .
 gnutls28 (3.4.4.1-1) experimental; urgency=medium
 .
   * New upstream version.
     + GNUTLS_PKCS11_OBJ_FLAG_NO_STORE_PUBKEY added to gnutls_pkcs11_obj_flags,
       bump dependency info for functions taking it as argument or returning it.
     + Bump dependency info on private symbols.
     + Update debian/copyright.
     + Fixes double free in DN decoding [GNUTLS-SA-2015-3]. Closes: #795068
       CVE-2015-6251
 .
 gnutls28 (3.4.3-1) experimental; urgency=medium
 .
   * Re-enable libidn-support, use versioned b-d on libidn11-dev >= 1.31.
   * New upstream version.
     + Bump dependency info on gnutls_pkcs11_token_get_info due to changed enum
       gnutls_pkcs11_token_info_t.
     + Add dependency info for new symbols, bump private symbol dependency.
 .
 gnutls28 (3.4.2-2) experimental; urgency=medium
 .
   * Disable libidn support because CVE-2015-2059 is still not fixed. See
     <https://gitlab.com/gnutls/gnutls/issues/10>. This also disables building
     of crywrap.
 .
 gnutls28 (3.4.2-1) experimental; urgency=medium
 .
   * New upstream version.
     + Drop 50_updated-sign-md5-rep-to-reduce-false-failures.patch.
     + Update libgnutls30.symbols. (Add new fuctions, bump private symbol
       version, bump gnutls_init() due to newly added GNUTLS_NO_SIGNAL flag.)
 .
 gnutls28 (3.4.1-1) experimental; urgency=medium
 .
   * New upstream version.
     + Bump (build)-depends on nettle and p11-kit.
     + Drop 20_debian_specific_soname.diff, 40_no_more_ssl3.diff and
       55_nettle3.patch.
     + Update 14_version_gettextcat.diff.
     + Soname bump, library package renamed from libgnutls-deb0-28 to
       libgnutls30.
     + OpenSSL compat layer is not built by default anymore, pass
       --enable-openssl-compatibility to ./configure.
     + Update symbol file.
     + libgnutls: priority strings VERS-TLS-ALL and VERS-DTLS-ALL are
       restricted to the corresponding protocols only, and the VERS-ALL
       string is introduced to catch all possible protocols. Closes: #773145
     + Since the pkg-config file gnutls.pc now lists libidn in Requires.private
       "pkg-config --exists gnutls" will fail if libidn.pc is not present. Add
       dependency on libidn11-dev to libgnutls28-dev.
   * Fix typo in debian/rules
     (s/-disable-silent-rules/--disable-silent-rules).
Checksums-Sha1:
 7dd0d52e195a6057d1cc8d4f24f3e88a82d5d11a 3061 gnutls28_3.4.9-2ubuntu1.dsc
 04df5ec2bb1282704e99b15fd64892026fb95f1c 6627640 gnutls28_3.4.9.orig.tar.xz
 c087116cb2323a2c49d31c1f34a0a2f0e0f599ae 87584 gnutls28_3.4.9-2ubuntu1.debian.tar.xz
Checksums-Sha256:
 28a875aedf41a2b2d6442373f0f177dca51abad19489444bb78b405daa9bdc29 3061 gnutls28_3.4.9-2ubuntu1.dsc
 48594fadba33d450f796ec69526cf2bce6ff9bc3dc90fbd7bf38dc3601f57c3f 6627640 gnutls28_3.4.9.orig.tar.xz
 725c920bb3383f19c95af2b99ff0411692a61ed5c5c23bd2c4bafebe80dcd553 87584 gnutls28_3.4.9-2ubuntu1.debian.tar.xz
Files:
 77990d0b197252c68f8e5b90ae26c073 3061 libs optional gnutls28_3.4.9-2ubuntu1.dsc
 1b3b6d55d0e2b6d01a54f53129f1da9b 6627640 libs optional gnutls28_3.4.9.orig.tar.xz
 e243517bb696b0a87441c35114f3dd66 87584 libs optional gnutls28_3.4.9-2ubuntu1.debian.tar.xz
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCAAGBQJWxNOlAAoJEL1+qmB3j6b1zEIQAMz2gT+PkST4mpj5Gmm3eOvV
QkY0tKk3N6pxddOdYjWuthE/aqYKMGEBuEykv/fKmCjzfAw/DJVjMUyx1GzEp6r0
AibhsMycnS91vUy3zdEKEn6wgkLtYR4ukLLk+eendaTf3v+9q3RUII0z7PxiWoMR
bJBzN4UMMx16DFrJDrs5oe6iRkJ7gTnxHfD8TRe5jXh8R9MEMH1bDPLMUm4k4A1Z
pqTNPjrWotP7YqcAaYIwKxoJ9I4laP6veQpljFDl/Q8HJO+EQcRZxWbD3461xlSX
fvvGsN4DuqWNk4dq9VY+nufmtu/bVcf0StUwYwtTaklsswC0FspJjYTtYhZLe+kA
BosaAHoK2cV1SZa+Wixvn34XTCD9DmwMjJJsRm7aUCVXN0/VjPOWZkA4xgNZeIDq
KYiHBQhowgX2n6u8kd2RteIeo8ETL68eyUtdMyPuD5xyRBSjd8l7kKmSa/KQCVsT
rUc1c5PlK2dvzcVPSbbWx8o+W/ZuPc970sdwPoZOw7LFbgOux7duCo20Z7rMvfDw
zJhdLuEUrxu46CszDoOPhkpwkthpx5WkbmL7tikElBaRShXOaQAu2DxUjce0EeWg
3mKcFehITTq8lwixyoMPraDxU9QVCz80MRjPGHJ4hJKfgf/m37LOLXSsmxznK/2D
e3fuEcSjLxpUmM/OSAY4
=QZ0w
-----END PGP SIGNATURE-----