Change log for libcrypto++ package in Ubuntu

libcrypto++ (8.9.0-1.1build1) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 01:52:58 +0000

Available diffs

• diff from 8.9.0-1.1 (in Debian) to 8.9.0-1.1build1 (552 bytes)

libcrypto++ (8.9.0-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1062265

 -- Benjamin Drung <email address hidden>  Wed, 28 Feb 2024 10:39:14 +0000

Available diffs

• diff from 8.9.0-1 to 8.9.0-1.1 (1.2 KiB)

libcrypto++ (8.9.0-1) unstable; urgency=medium

  * New upstream release.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Mon, 02 Oct 2023 17:51:51 +0200

Available diffs

• diff from 8.8.0-1 to 8.9.0-1 (45.4 KiB)

libcrypto++ (8.8.0-1) unstable; urgency=medium

  * New upstream release.

  [ Helmut Grohne <email address hidden> ]
  * Fix FTCBFS: Export build tools for all targets (closes: #1018923).


 -- Laszlo Boszormenyi (GCS) <email address hidden>  Fri, 07 Jul 2023 17:20:07 +0200

Available diffs

• diff from 8.7.0+git220824-1 to 8.8.0-1 (51.3 KiB)

libcrypto++ (8.7.0+git220824-1) unstable; urgency=medium

  * New git snapshot release.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Thu, 25 Aug 2022 19:44:25 +0200

Available diffs

• diff from 8.6.0-3 to 8.7.0+git220824-1 (90.1 KiB)
• diff from 8.7.0-1 to 8.7.0+git220824-1 (11.5 KiB)

libcrypto++ (8.7.0-1) unstable; urgency=medium

  * New upstream release (closes: #1012974).
  * Add -fno-devirtualize to CXXFLAGS for GCC 12 not to remove code member
    function needed for self-testing.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sat, 13 Aug 2022 07:22:58 +0200

Available diffs

• diff from 8.6.0-3 to 8.7.0-1 (83.9 KiB)

libcrypto++ (8.6.0-3) unstable; urgency=medium

  * Fix armhf FTBFS (closes: #1001995). 

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sat, 12 Feb 2022 10:39:14 +0100

Available diffs

• diff from 8.6.0-2ubuntu1 (in Ubuntu) to 8.6.0-3 (10.5 KiB)

libcrypto++ (8.6.0-2ubuntu1) jammy; urgency=medium

  * debian/patches/correct-arm-arch.patch: Use the correct architecture
    target for armhf.

 -- Steve Langasek <email address hidden>  Sun, 19 Dec 2021 12:21:58 -0800

Available diffs

• diff from 8.4.0-1 (in Debian) to 8.6.0-2ubuntu1 (266.8 KiB)
• diff from 8.6.0-2 (in Debian) to 8.6.0-2ubuntu1 (1000 bytes)

libcrypto++ (8.6.0-2) unstable; urgency=medium

  * Fix armel and armhf link breakage.
  * Update Standards-Version to 4.6.0 .

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sat, 25 Sep 2021 19:44:37 +0200

libcrypto++ (8.4.0-1) unstable; urgency=medium

  * New upstream release.
  * Update patches.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sat, 02 Jan 2021 08:22:09 +0100

Available diffs

• diff from 8.3.0-3 to 8.4.0-1 (47.2 KiB)

libcrypto++ (8.3.0-3) unstable; urgency=medium

  * Upload to Sid.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Fri, 25 Dec 2020 18:16:54 +0100

Available diffs

• diff from 5.6.4-10 to 8.3.0-3 (5.4 MiB)

libcrypto++ (5.6.4-10) unstable; urgency=medium

  * Include BLAKE2 cryptographic hash functions to the library
    (closes: #932620).

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Wed, 16 Sep 2020 17:32:49 +0200

Available diffs

• diff from 5.6.4-9build1 (in Ubuntu) to 5.6.4-10 (659 bytes)

libcrypto++ (5.6.4-9build1) focal; urgency=medium

  * No-change rebuild for libgcc-s1 package name change.

 -- Matthias Klose <email address hidden>  Tue, 24 Mar 2020 15:05:48 +0100

Available diffs

• diff from 5.6.4-9 (in Debian) to 5.6.4-9build1 (363 bytes)

libcrypto++ (5.6.4-9) unstable; urgency=high

  * Fix CVE-2019-14318: timing side channel in ECDSA signature generation
    (closes: #934326).
  * Update Standards-Version to 4.4.0:
    - change package priority to optional.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sun, 11 Aug 2019 19:13:44 +0000

Available diffs

• diff from 5.6.4-8 to 5.6.4-9 (4.3 KiB)

libcrypto++ (5.6.1-9ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Timing attack against Rijndael
    - debiain/patches/CVE-2016-3995.patch: Fix the Rijndael timing attack
      counter measure
    - CVE-2016-3995
  * SECURITY UPDATE: Memory exhaustion DOS
    - debiain/patches/CVE-2016-9939.patch: Fix possible DoS in ASN.1 decoders
    - CVE-2016-9939

 -- Mike Salvatore <email address hidden>  Wed, 17 Oct 2018 10:42:51 -0400

Available diffs

• diff from 5.6.1-9 (in Debian) to 5.6.1-9ubuntu0.1 (2.0 KiB)

libcrypto++ (5.6.4-8) unstable; urgency=medium

  * Install all headers (closes: #866100).
  * Update watch file (closes: #862876).
  * Update Standards-Version to 4.0.0 and debhelper level to 10 .

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Tue, 27 Jun 2017 19:04:20 +0000

Available diffs

• diff from 5.6.4-7 to 5.6.4-8 (1.2 KiB)

libcrypto++ (5.6.4-7) unstable; urgency=high

  * Backport security fix for out-of-bounds read in zinflate.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Mon, 05 Jun 2017 06:55:28 +0000

Available diffs

• diff from 5.6.4-6 to 5.6.4-7 (1.1 KiB)

libcrypto++ (5.6.1-6+deb8u3build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 5.6.1-6+deb8u1build0.14.04.1 to 5.6.1-6+deb8u3build0.14.04.1 (1.8 KiB)

libcrypto++ (5.6.4-6) unstable; urgency=medium

  * Backport additional ASN.1 validations.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sun, 25 Dec 2016 08:46:52 +0000

Available diffs

• diff from 5.6.4-5 to 5.6.4-6 (2.3 KiB)

libcrypto++ (5.6.4-5) unstable; urgency=high

  * Fix CVE-2016-9939: possible DoS in ASN.1 decoders (closes: #848009).

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Fri, 23 Dec 2016 20:54:36 +0000

Available diffs

• diff from 5.6.4-3 to 5.6.4-5 (2.2 KiB)
• diff from 5.6.4-4 to 5.6.4-5 (1.1 KiB)

libcrypto++ (5.6.4-4) unstable; urgency=medium

  * Apply upstream fix for Integer class ABI break (closes: #845460).

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Fri, 02 Dec 2016 17:00:47 +0000

Available diffs

• diff from 5.6.4-3 to 5.6.4-4 (1.6 KiB)

libcrypto++ (5.6.4-3) unstable; urgency=medium

  * Backport upstream fix for potential zeroizer removal.
  * Backport upstream fix for Hurd build.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Tue, 01 Nov 2016 11:27:35 +0000

Available diffs

• diff from 5.6.3-8 to 5.6.4-3 (3.5 MiB)

libcrypto++ (5.6.3-8) unstable; urgency=high

  * Fix CVE-2016-7420 with compiling -DNDEBUG to prevent sensitive information
    leakage to core dumps when an assert() happens.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Fri, 16 Sep 2016 15:42:32 +0000

Available diffs

• diff from 5.6.3-7 to 5.6.3-8 (609 bytes)

libcrypto++ (5.6.3-7) unstable; urgency=low

  * Prevent binary testing when only architecture independent packages are
    built (closes: #821176).

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Fri, 15 Jul 2016 20:11:19 +0000

Available diffs

• diff from 5.6.3-6 to 5.6.3-7 (728 bytes)

libcrypto++ (5.6.3-6) unstable; urgency=high

  * Backport last bit of CVE-2016-3995 fix, the Rijndael timing attack
    counter measure.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Wed, 13 Apr 2016 16:40:13 +0000

Available diffs

• diff from 5.6.1-9 to 5.6.3-6 (1.9 MiB)

libcrypto++ (5.6.1-9) unstable; urgency=low

  * Compile integer.cpp with -O1 on armel to prevent FTBFS (closes: #796297).

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sat, 12 Sep 2015 10:17:29 +0200

Available diffs

• diff from 5.6.1-8 to 5.6.1-9 (1.4 KiB)

libcrypto++ (5.6.1-8) unstable; urgency=medium

  * Rename library to libcrypto++9v5 and the debug one to libcrypto++9-dbg
    for GCC 5 transition.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Wed, 12 Aug 2015 18:43:04 +0200

Available diffs

• diff from 5.6.1-7ubuntu1 (in Ubuntu) to 5.6.1-8 (853 bytes)

libcrypto++ (5.6.1-7ubuntu1) wily; urgency=medium

  * Rename library packages for g++5 ABI transition.

 -- Steve Langasek <email address hidden>  Mon, 03 Aug 2015 22:09:13 +0000

Available diffs

• diff from 5.6.1-7 (in Debian) to 5.6.1-7ubuntu1 (1.2 KiB)

libcrypto++ (5.6.1-6+deb8u1build0.15.04.1) vivid-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 5.6.1-6 (in Debian) to 5.6.1-6+deb8u1build0.15.04.1 (1.4 KiB)

libcrypto++ (5.6.1-6+deb8u1build0.14.10.1) utopic-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 5.6.1-6 (in Debian) to 5.6.1-6+deb8u1build0.14.10.1 (1.4 KiB)

libcrypto++ (5.6.1-6+deb8u1build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 5.6.1-6 (in Debian) to 5.6.1-6+deb8u1build0.14.04.1 (1.4 KiB)

libcrypto++ (5.6.1-7) unstable; urgency=high

  * Fix CVE-2015-2141.
  * Update Standards-Version to 3.9.6 and debhelper level to 9 .

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sun, 28 Jun 2015 12:34:20 +0000

Available diffs

• diff from 5.6.1-6 to 5.6.1-7 (1.4 KiB)

libcrypto++ (5.6.1-6) unstable; urgency=low


  * Fix build failure with gcc-4.7 (closes: #668700) by adding missing 'this'
    references. Thanks to Matthias Klose <email address hidden> .
  * Update packaging bits.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sat, 14 Apr 2012 20:21:41 +0200

Available diffs

• diff from 5.6.1-5build1 (in Ubuntu) to 5.6.1-6 (2.8 KiB)

libcrypto++ (5.6.1-5build1) precise; urgency=low

  * No-change rebuild against current pkgbinarymangler to fix broken
    md5sums. (see LP #875466)
 -- Martin Pitt <email address hidden>   Wed, 29 Feb 2012 08:40:23 +0100

Available diffs

• diff from 5.6.1-5 to 5.6.1-5build1 (384 bytes)

libcrypto++ (5.6.1-5) unstable; urgency=low

  * New maintainer (closes: #628935).
  * salsa.patch from upstream to fix testcase FTBFS (closes: #628298).
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  06 Jun 2011 08:22:31 +0000

Available diffs

• diff from 5.6.1-4 to 5.6.1-5 (1.6 KiB)

libcrypto++ (5.6.1-4) unstable; urgency=low

  * Fix Pananma so that it works on armel, thanks to Wei Dai.
    (Closes: #619856)

Available diffs

• diff from 5.6.0-6 to 5.6.1-4 (131.0 KiB)

libcrypto++ (5.6.0-6) unstable; urgency=low

  * Fix sha256 assembly problem with signed address comparison, thanks to
    Ken Raeburn.
    (Closes: #585930)
  * Converted to dpkg-source format 3.0 (quilt).
  * Use mercurial-buildpackage for repository maintenance, so old
    repository does not exist any more.
  * Bumped Standards-Version to 3.8.4, no change.
  * Use misc:Depends debhelper macro for all packages.
  * Introduced a realclean target in debian/rules for cleaning up an
    interrupted build.
  * Build-depend on a proper quilt-handling version of dpkg-source instead
    of quilt itself.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  15 Oct 2010 09:37:41 +0000

Available diffs

• diff from 5.6.0-5 to 5.6.0-6 (4.2 KiB)

libcrypto++ (5.6.0-5) unstable; urgency=low

  * Fix build failure on Hurd by using POSIX threads, thanks to Samuel
    Thibault.
    (Closes: #550786)

Available diffs

• diff from 5.6.0-3 to 5.6.0-5 (1.9 KiB)

libcrypto++ (5.6.0-3) unstable; urgency=low

  * Depend on generic automake package (at the time of writing version 11).
    (Closes: #543028)
  * Update the various package descriptions.
    (Closes: #531814)
  * Upgrate to debhelper version 7, using dh_prep instead of dh_clean -k.
  * Updated Standards-Version to 3.8.3, but retaining GNU style variables
    because they are passed to automake scripts.  Also correct
    "hppa-linux" to "hppa-linux-gnu".

 -- Stefan Ebner <email address hidden>   Fri,  18 Sep 2009 15:41:33 +0100

Available diffs

• diff from 5.6.0-2 to 5.6.0-3 (2.6 KiB)

libcrypto++ (5.6.0-2) unstable; urgency=low

  * Added a package with debug symbols.
  * Drop the DCRYPTOPP_DISABLE_ASM flag to avoid segfault in amule on
    i386.
    (Closes: #525071)

 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  01 Jun 2009 10:43:34 +0100

Available diffs

• diff from 5.6.0-1 to 5.6.0-2 (868 bytes)

libcrypto++ (5.6.0-1) unstable; urgency=low

  * New upstream version.
    + Includes incompatible changes, so bumping the shared library number to 8
      (libtool version info 8:0:0).
    + The test data is now in its own directory, so this TestData directory
      is handled in debian/rules the same way that TestVectors is.
  * Link with pthread to avoid warning from dpkg-shlibdeps.
  * Avoid running the test suite twice by giving it its own target: check.

Available diffs

• diff from 5.5.2-2 to 5.6.0-1 (pending)

libcrypto++ (5.5.2-2) unstable; urgency=low

  * Produce a pkg-config file for the development package.
    (Closes: #473090)
  * Use doc-bas section Programming.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  02 May 2008 02:13:09 +0100

libcrypto++ (5.5.2-1) unstable; urgency=low

  * New upstream version.
  * Increased SONAME from 6 to 7 because of API changes.
  * Fixed GCC 4.3 header include problem.
    (Closes: #455627)
  * Created symlinks from libcryptopp* to libcrypto++*, as requested in
    bug #448766.
  * Bumped debhelper version to 5.
  * Bumped Standards-Version to 3.7.3.

 -- Zooko O'Whielacronx <email address hidden>   Fri,  15 Feb 2008 11:08:34 +0000

libcrypto++ (5.5-5) unstable; urgency=low

  * Create a symlink to /usr/include/cryptopp -> crypto++ to aid
    portability of client code.
    (Closes: #448766)
  * Bumped automake to 1.10 instead of 1.9 .
  

 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  15 Nov 2007 10:51:11 +0000

libcrypto++ (5.5-4) unstable; urgency=low

  * Use POSIX threads on GNU/kFreeBSD, thanks to Petr Salinger.
    (Closes: #433672)

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  23 Oct 2007 17:03:52 +0100

libcrypto++ (5.5-3) unstable; urgency=high

  * Do not compile with -msse2 to avoid crash on Pentium II, thanks
    to Adeodato Simó.  Hence the high urgency.
    (Closes: #428150)
  * Use ${binary:Version} instead of ${Source-Version} to facilitate
    binNMU.
  * Do not ignore 'make clean' errors.
  

 -- Sebastien Bacher <email address hidden>   Thu,  05 Jul 2007 21:09:35 +0100

libcrypto++ (5.5-2) unstable; urgency=low

  * Use CURDIR throughout debian/rules to avoid buildd failures.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  31 May 2007 14:40:52 +0100

libcrypto++ (5.5-1) unstable; urgency=low

  * New upstream release.
  * Bumped SO name to 6.0.0 because of new namespaces and removed algorithms.
  * Updated man page and build scripts.
  * Only use header files to generate documentation because Doxygen
    otherwise chokes.

libcrypto++ (5.2.1c2a-3) unstable; urgency=low

  * Patch source so that it compiles with GCC 4.1 .  More specifically,
    avoid mixing implicit calls to base classes and free-standing
    functions.
    (Closes: #356170).
  * Use LDFLAGS=-pthread to fix linking errors.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  15 Jun 2006 14:34:58 +0100

libcrypto++ (5.2.1c2a-2) unstable; urgency=low


  * Build-depend on a version of g++ that fixes PR c++/21123 which
    resulted in internal compiler errors on m68k, arm, and hppa
    (Closes: #343003).
  * Include an override to stop Lintian complaining about the name of the
    shared library.
  * Removed link in main headline of Doxygen generated documentaion since
    Doxygen insists on escaping it.

 -- Jens Peter Secher <email address hidden>  Tue, 13 Dec 2005 20:40:25 +0100

libcrypto++ (5.2.1c2-5) unstable; urgency=low


  * Fixed the debian/rules so that the binary-arch target can be built in
    isolation (Closes: #323161).
  * Added a doc-base file for the libcrypto++-doc package.

 -- Jens Peter Secher <email address hidden>  Mon, 15 Aug 2005 22:18:05 +0200

libcrypto++ (5.2.1a-1) unstable; urgency=high


  * Urgency set to high because lastest upload was unclean
  * Rename libcrypto++-5.2.1.orig.tar.gz in  libcrypto++-5.2.1a.orig.tar.gz
  
 -- Pierre Machard <email address hidden>  Fri, 27 Aug 2004 12:35:05 +0200

libcrypto++ (5.1-5) unstable; urgency=low


  * Remove the final arch specific (rather than feature specifc) tests in
    crypto_config.h,
  Closes: #238220
  * Add symlinks libcrypto++.{a,la,so} pointing to
    libcrypto++5.1.{a,la,so} so that users can act like the ABI of this
    library doesn't change with every major release,
  Closes: #241148

 -- Stephen Zander <email address hidden>  Mon, 19 Apr 2004 18:10:28 -0700