Change log for gnutls28 package in Ubuntu

gnutls28 (3.2.16-1ubuntu2.2) utopic-security; urgency=medium

  * SECURITY UPDATE: certificate algorithm consistency issue
    - debian/patches/CVE-2015-0294.patch: make sure the two signature
      algorithms match on cert import in lib/x509/x509.c.
    - CVE-2015-0294
 -- Marc Deslauriers <email address hidden>   Fri, 20 Mar 2015 08:20:53 -0400

Available diffs

• diff from 3.2.16-1ubuntu2.1 to 3.2.16-1ubuntu2.2 (1.2 KiB)

gnutls28 (3.3.8-3ubuntu2) vivid; urgency=medium

  * SECURITY UPDATE: denial of service and possible code execution via
    elliptic curves parameter printing
    - debian/patches/CVE-2014-8564.patch: add more sanity checks in
      lib/gnutls_ecc.c.
    - CVE-2014-8564
 -- Marc Deslauriers <email address hidden>   Mon, 10 Nov 2014 15:18:59 -0500

Available diffs

• diff from 3.3.8-3ubuntu1 to 3.3.8-3ubuntu2 (1.1 KiB)

gnutls28 (3.2.16-1ubuntu2.1) utopic-security; urgency=medium

  * SECURITY UPDATE: denial of service and possible code execution via
    elliptic curves parameter printing
    - debian/patches/CVE-2014-8564.patch: add more sanity checks in
      lib/gnutls_ecc.c.
    - CVE-2014-8564
 -- Marc Deslauriers <email address hidden>   Mon, 10 Nov 2014 15:21:47 -0500

Available diffs

• diff from 3.2.16-1ubuntu2 (in Ubuntu) to 3.2.16-1ubuntu2.1 (1.2 KiB)

gnutls28 (3.3.8-3ubuntu1) vivid; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Make gnutls28 default.

Available diffs

• diff from 3.2.16-1ubuntu2 to 3.3.8-3ubuntu1 (2.9 MiB)

gnutls28 (3.2.16-1ubuntu2) utopic; urgency=medium

  * No-change rebuild to get debug symbols on all architectures.
 -- Brian Murray <email address hidden>   Tue, 21 Oct 2014 14:15:57 -0700

Available diffs

• diff from 3.2.16-1ubuntu1 to 3.2.16-1ubuntu2 (328 bytes)

gnutls28 (3.2.16-1ubuntu1) utopic; urgency=medium

  * Make gnutls28 default.
 -- Dimitri John Ledkov <email address hidden>   Fri, 08 Aug 2014 08:24:17 +0100

Available diffs

• diff from 3.2.16-1 (in Debian) to 3.2.16-1ubuntu1 (1.1 KiB)

gnutls28 (3.2.16-1) unstable; urgency=medium


  * New upstream version.

 -- Andreas Metzler <email address hidden>  Wed, 23 Jul 2014 12:36:32 +0200

Available diffs

• diff from 3.2.15-1 to 3.2.16-1 (338.7 KiB)
• diff from 3.2.15-3 to 3.2.16-1 (334.1 KiB)

gnutls28 (3.2.15-3) unstable; urgency=medium


  * [debian/copright]: Replace reference to GPLv2.1 (which does not exist)
    with one to GPLv2. (Thanks, Jakub Wilk) Closes: #754160
  * Stop shipping libgnutls-xssl0, it has been removed in upstream's 3.3
    series.

 -- Andreas Metzler <email address hidden>  Sat, 12 Jul 2014 13:55:48 +0200

Available diffs

• diff from 3.2.15-2 to 3.2.15-3 (1.4 KiB)

gnutls28 (3.2.15-2) unstable; urgency=high


  * Fix crashes due to symbol clashes when a binary ends up being linked
    against GnuTLS v2 and v3 by bumping library symbol-versioning (and
    therefore also the soname) in a Debian specific way, to make sure there is
    no conflict with future:
    + 20_debian_specific_soname.diff
      - Symbol versions: GNUTLS_* -> GNUTLS_DEBIAN_0_*
      - Add "-release deb0" to libtool link command.
    + Rename libgnutls28 to libgnutls-deb0-28, matching the new soname.
    + Change 14_version_gettextcat.diff, too.
    Closes: #74874
  * Drop libgnutls28-dbg Conflicts with libgnutls13-dbg, libgnutls26-dbg.
    These have been unnecessary since we started using dh compat v9, where
    debugging symbols are installed to /usr/lib/debug/.build-id.
  * debian/copyright: Add info about GPLv2 compatibility.

 -- Andreas Metzler <email address hidden>  Thu, 05 Jun 2014 18:56:03 +0200

Available diffs

• diff from 3.2.15-1 to 3.2.15-2 (4.6 KiB)

gnutls28 (3.2.15-1) unstable; urgency=high


  * New upstream version.
    + Includes a fix for GNUTLS-SA-2014-3 / CVE-2014-3466.

 -- Andreas Metzler <email address hidden>  Sat, 31 May 2014 08:37:00 +0200

Available diffs

• diff from 3.2.14-1 to 3.2.15-1 (59.9 KiB)

gnutls28 (3.2.14-1) unstable; urgency=medium


  * Do not build-depend on guile-2.0 on m68k. Closes: #745461
  * New upstream version.
  * Manually version libgnutls28's dependency on libgmp10 as (>= 2:6), to
    enforce a dual-licensed (GPLv2+/LGPLv2.1+) version of GMP. Also add a
    corresponding versioned build-dependency, to prevent building of
    uninstallable packages.

 -- Andreas Metzler <email address hidden>  Wed, 07 May 2014 19:29:26 +0200

Available diffs

• diff from 3.2.11-2ubuntu1 (in Ubuntu) to 3.2.14-1 (605.2 KiB)

gnutls28 (3.2.11-2ubuntu1) trusty; urgency=medium

  * Resynchronise with Debian.  Remaining changes:
    - Drop gnutls-bin and -doc since we want to use the versions in gnutls26
      as the defaults instead.
  * Add arm64 and ppc64el to the list of non-ia64 architectures on which
    guile-gnutls is built.

Available diffs

• diff from 3.2.3-1ubuntu2 to 3.2.11-2ubuntu1 (3.4 MiB)

gnutls28 (3.2.3-1ubuntu2) trusty; urgency=medium

  * Fix detection of floating point endianness.
  * Use dh-autoreconf to update libtool.m4 for new ports.
 -- Colin Watson <email address hidden>   Wed, 05 Feb 2014 05:17:52 +0000

Available diffs

• diff from 3.2.3-1ubuntu1 to 3.2.3-1ubuntu2 (1.8 KiB)

gnutls28 (3.2.3-1ubuntu1) saucy; urgency=low

  * Sync with Debian (LP: #1068029). Remaining change:
    - Drop gnutls-bin and -doc since we want to use the versions
      in gnutls26 as the defaults instead

Available diffs

• diff from 3.0.22-2ubuntu1 to 3.2.3-1ubuntu1 (3.2 MiB)

gnutls28 (3.0.22-2ubuntu1) raring; urgency=low

  * Merge from Debian unstable (LP: #1091208).  Remaining changes:
    - Drop gnutls-bin and -doc since we want to use the versions
      in gnutls26 as the defaults instead

Available diffs

• diff from 3.0.21-1ubuntu1 to 3.0.22-2ubuntu1 (562.9 KiB)

gnutls28 (3.0.21-1ubuntu1) quantal; urgency=low

  * Resynchronize with Debian.
    Remaining change:
    - Drop gnutls-bin and -doc since we want to use the versions
      in gnutls26 as the defaults instead

Available diffs

• diff from 3.0.20-3ubuntu1 to 3.0.21-1ubuntu1 (589.5 KiB)

gnutls28 (3.0.20-3ubuntu1) quantal; urgency=low

  * Resynchronize with Debian. Remaining change:
    - Drop gnutls-bin and -doc since we want to use the versions
      in gnutls26 as the defaults instead

Available diffs

• diff from 3.0.11-1ubuntu2 to 3.0.20-3ubuntu1 (3.6 MiB)

gnutls28 (3.0.11-1ubuntu2) precise; urgency=low

  * Drop gnutls-doc binary package, for the same reason as gnutls-bin.
 -- Colin Watson <email address hidden>   Tue, 24 Jan 2012 20:04:09 +0000

Available diffs

• diff from 3.0.11-1ubuntu1 to 3.0.11-1ubuntu2 (890 bytes)

gnutls28 (3.0.11-1ubuntu1) precise; urgency=low

  * Drop gnutls-bin binary package.  This is now shipped from the gnutls26
    source package instead, since we want to continue using that as the
    default for at least Ubuntu 12.04 LTS.
 -- Colin Watson <email address hidden>   Tue, 24 Jan 2012 18:22:02 +0000

Available diffs

• diff from 3.0.11-1 (in Debian) to 3.0.11-1ubuntu1 (1.4 KiB)

gnutls28 (3.0.11-1) unstable; urgency=low


  * New upstream version.

 -- Andreas Metzler <email address hidden>  Sat, 07 Jan 2012 12:55:33 +0100

Available diffs

• diff from 3.0.9-2 (in Ubuntu) to 3.0.11-1 (1.1 MiB)

gnutls28 (3.0.9-2) unstable; urgency=low

  * [20_test-select.diff] Do not run gnulib test-select test anymore. The
    test fails on kfreebsd-i386, the gnutls library does not use select().
  * [30_correctly-set-the-odd-bits.patch] Post release fix from GIT head.
  * Upload to unstable.