[ubuntu/yakkety-proposed] gnutls28 3.4.14-1ubuntu1 (Accepted)
Steve Langasek
steve.langasek at ubuntu.com
Fri Jul 15 02:19:41 UTC 2016
gnutls28 (3.4.14-1ubuntu1) yakkety; urgency=low
* Merge from Debian unstable. Remaining changes:
- debian/patches/disable_global_init_override_test.patch: disable failing
test.
* Drop rename from libgnutls28-dev to libgnutls-dev. No sign that Debian
is ever going to make this change, and only 14 packages build-depend on
libgnutls-dev in Ubuntu, so this is an unnecessary delta.
gnutls28 (3.4.14-1) unstable; urgency=medium
* Also mark b-d on net-tools/freebsd-net-tools as optional via the
<!nocheck> profile. (Thanks, Steven Chamberlain for bug-report and
patch). Closes: #826693
* New upstream bugfix release. This includes the following fix:
+ libgnutls: Address issue when utilizing the p11-kit trust store
for certificate verification (GNUTLS-SA-2016-2).
The issue is not relevant for the Debian binary packages, since we do not
build with --with-default-trust-store-pkcs11=.
gnutls28 (3.4.13-1) unstable; urgency=high
* New upstream bugfix release.
+ Fixes GNUTLS-SA-2016-1 (File overwrite by setuid programs), which was
introduced in 3.4.12.
+ Testsuite requires netstat, add b-d.
gnutls28 (3.4.12-2) unstable; urgency=medium
* Drop libgnutls30 Conflicts with libnettle4, libhogweed2. - These should
have been dropped with the soname bump from libgnutls-deb0-28 to
libgnutls30 in the first place. (Thanks, Andreas Beckmann)
Closes: #825645
gnutls28 (3.4.12-1) unstable; urgency=medium
* New upstream version.
+ Drop superfluous patches.
(45_01_gnutls_ocsp_resp_get_single-fail-if-thisUpdate-is-no.patch
45_02_gnutls_packet_get-avoid-null-pointer-dereference-on-.patch
45_03_configure-corrected-regression-which-prevented-the-b.patch
45_04_handshake-do-not-overwrite-the-server-s-signature-al.patch)
+ Update copyright info, ship copy of the GNU Affero General Public
License v3 in /usr/share/doc/libgnutls30/AGPLv3.license, two files
of the testsuite use this license.
Date: Thu, 14 Jul 2016 19:14:00 -0700
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnutls28/3.4.14-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 14 Jul 2016 19:14:00 -0700
Source: gnutls28
Binary: libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc libgnutlsxx28 libgnutls-openssl27
Architecture: source
Version: 3.4.14-1ubuntu1
Distribution: yakkety
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Description:
gnutls-bin - GNU TLS library - commandline utilities
gnutls-doc - GNU TLS library - documentation and examples
libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
libgnutls28-dev - GNU TLS library - development files
libgnutls30 - GNU TLS library - main runtime library
libgnutlsxx28 - GNU TLS library - C++ runtime library
Closes: 825645 826693
Changes:
gnutls28 (3.4.14-1ubuntu1) yakkety; urgency=low
.
* Merge from Debian unstable. Remaining changes:
- debian/patches/disable_global_init_override_test.patch: disable failing
test.
* Drop rename from libgnutls28-dev to libgnutls-dev. No sign that Debian
is ever going to make this change, and only 14 packages build-depend on
libgnutls-dev in Ubuntu, so this is an unnecessary delta.
.
gnutls28 (3.4.14-1) unstable; urgency=medium
.
* Also mark b-d on net-tools/freebsd-net-tools as optional via the
<!nocheck> profile. (Thanks, Steven Chamberlain for bug-report and
patch). Closes: #826693
* New upstream bugfix release. This includes the following fix:
+ libgnutls: Address issue when utilizing the p11-kit trust store
for certificate verification (GNUTLS-SA-2016-2).
The issue is not relevant for the Debian binary packages, since we do not
build with --with-default-trust-store-pkcs11=.
.
gnutls28 (3.4.13-1) unstable; urgency=high
.
* New upstream bugfix release.
+ Fixes GNUTLS-SA-2016-1 (File overwrite by setuid programs), which was
introduced in 3.4.12.
+ Testsuite requires netstat, add b-d.
.
gnutls28 (3.4.12-2) unstable; urgency=medium
.
* Drop libgnutls30 Conflicts with libnettle4, libhogweed2. - These should
have been dropped with the soname bump from libgnutls-deb0-28 to
libgnutls30 in the first place. (Thanks, Andreas Beckmann)
Closes: #825645
.
gnutls28 (3.4.12-1) unstable; urgency=medium
.
* New upstream version.
+ Drop superfluous patches.
(45_01_gnutls_ocsp_resp_get_single-fail-if-thisUpdate-is-no.patch
45_02_gnutls_packet_get-avoid-null-pointer-dereference-on-.patch
45_03_configure-corrected-regression-which-prevented-the-b.patch
45_04_handshake-do-not-overwrite-the-server-s-signature-al.patch)
+ Update copyright info, ship copy of the GNU Affero General Public
License v3 in /usr/share/doc/libgnutls30/AGPLv3.license, two files
of the testsuite use this license.
Checksums-Sha1:
81a6daa9669fb23f622022af1503321580fe08e9 2930 gnutls28_3.4.14-1ubuntu1.dsc
2a3ef051de78f1690d7efd6399681dc7efee8937 6673148 gnutls28_3.4.14.orig.tar.xz
a33ad00a2bc3d9473e2def9e929fe1ef36421be9 98328 gnutls28_3.4.14-1ubuntu1.debian.tar.xz
Checksums-Sha256:
e7f4b906851c27a98e775e3be379089c87a47f9dbe1955dd8a8f041dbd7898e4 2930 gnutls28_3.4.14-1ubuntu1.dsc
35deddf2779b76ac11057de38bf380b8066c05de21b94263ad5b6dfa75dfbb23 6673148 gnutls28_3.4.14.orig.tar.xz
9a8eb919c6b4b4253e26000269f10846c2c3e357dbd38d234d26b8502015e0f1 98328 gnutls28_3.4.14-1ubuntu1.debian.tar.xz
Files:
64c8c3fac8b5dc61c6526466df920374 2930 libs optional gnutls28_3.4.14-1ubuntu1.dsc
ad3e269a6793424d5d21c9626e1c9ef1 6673148 libs optional gnutls28_3.4.14.orig.tar.xz
5c4db2f16b308360d5e8b1fc2729cbf4 98328 libs optional gnutls28_3.4.14-1ubuntu1.debian.tar.xz
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=/UK7
-----END PGP SIGNATURE-----
More information about the Yakkety-changes
mailing list