Format: 1.8 Date: Tue, 28 May 2019 13:00:08 -0400 Source: gnutls28 Binary: gnutls-bin gnutls-doc libgnutls-dane0 libgnutls-openssl27 libgnutls28-dev libgnutls30 libgnutlsxx28 Architecture: amd64 all amd64_translations Version: 3.6.5-2ubuntu1.1 Distribution: disco Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gnutls-bin - GNU TLS library - commandline utilities gnutls-doc - GNU TLS library - documentation and examples libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx28 - GNU TLS library - C++ runtime library Changes: gnutls28 (3.6.5-2ubuntu1.1) disco-security; urgency=medium . * SECURITY UPDATE: double free in cert verification API - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after gnutls_free() in lib/includes/gnutls/gnutls.h.in. - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of variables after free(). - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer in lib/x509/x509.c. - CVE-2019-3829 * SECURITY UPDATE: uninitialized pointer access - debian/patches/CVE-2019-3836.patch: add missing initialization of local variable in lib/handshake-tls13.c. - CVE-2019-3836 Checksums-Sha1: 0aa3d2f3f70851f4adfb217104a098616945aa9c 1013208 gnutls-bin-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb 116636b1d9c894fd30fdbbf1de426d6886e0883c 265392 gnutls-bin_3.6.5-2ubuntu1.1_amd64.deb 48d1af6cee2b7cef641640135e1b5ee9fa27544a 4111608 gnutls-doc_3.6.5-2ubuntu1.1_all.deb 7886e58c62297e00f7e84a50db11a3b9469719ec 10834 gnutls28_3.6.5-2ubuntu1.1_amd64.buildinfo 84a621c6f6ac7b97562faf007cda1555f6ec5ddc 268249 gnutls28_3.6.5-2ubuntu1.1_amd64_translations.tar.gz ea059557c3caedabd5eb1cf0f8b64aac0ffcd831 57016 libgnutls-dane0-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb 15699f157e5e5f4d87f0702bbe2415de0e6cd78d 22872 libgnutls-dane0_3.6.5-2ubuntu1.1_amd64.deb b5ceeb6f44809b9f8301b02749152793fd0951ef 65084 libgnutls-openssl27-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb 97a39d84d6499445481fea07a3af7a69e600e5d2 22984 libgnutls-openssl27_3.6.5-2ubuntu1.1_amd64.deb 7d21c8307c6163ce00cc84f034428b0ae41caa61 786216 libgnutls28-dev_3.6.5-2ubuntu1.1_amd64.deb 7eff174f032fe73082e621951c55cf91ce132541 3723200 libgnutls30-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb cfbc0479f2eec294d2941550250c9549d6a2cdd3 760384 libgnutls30_3.6.5-2ubuntu1.1_amd64.deb f36c8e2fdb32e325c5191653357eea2a9f3cb405 54112 libgnutlsxx28-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb a1531a399a0c489c4c8b4fcc7471e2283e55eb59 14468 libgnutlsxx28_3.6.5-2ubuntu1.1_amd64.deb Checksums-Sha256: b76ed247c1295d090590fcd6ec64c14a60bbb3e0478804bc5c51391f03c49d67 1013208 gnutls-bin-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb 86962903793018ab51f292dc3a41e5a957faa4e5ae8b2e2ccc754278cbec7561 265392 gnutls-bin_3.6.5-2ubuntu1.1_amd64.deb a156552a83e55be9d84b354bbd5ba5f3c69cbcc6a5bdb7ed9a008f46bc2eadbd 4111608 gnutls-doc_3.6.5-2ubuntu1.1_all.deb a3320ecd983a2e290a95d427099d76049c3dc8ece75a9682e7fe3d1c13abdde8 10834 gnutls28_3.6.5-2ubuntu1.1_amd64.buildinfo eec0dddc30c0ae847652fbf311c3e67f208aecf974ae445a8bde9ab195ef76bc 268249 gnutls28_3.6.5-2ubuntu1.1_amd64_translations.tar.gz 7a7b7d18dee78022622b104b77cce923b2e9102f4e834d1e9536159733cb8952 57016 libgnutls-dane0-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb 6e1c5cc6b2e93bfd2ce28857bc367b9f0b4375b828ba083250c0ff5c6a0f5d3a 22872 libgnutls-dane0_3.6.5-2ubuntu1.1_amd64.deb 26e9cf0fd0ed49477f7af9637d4a5f3664c91723f4225bfcd52d722792b3f2b2 65084 libgnutls-openssl27-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb 0800f310596d2c91c9d23c993e8b1f1f4f9f1b1fda84a84c750e0b4884bfa2dd 22984 libgnutls-openssl27_3.6.5-2ubuntu1.1_amd64.deb c1eccedc798e700d7600758b798cb83aa8f1a673c59da0548a927ae6ff6dcc6d 786216 libgnutls28-dev_3.6.5-2ubuntu1.1_amd64.deb 585fd9f308e4926e8e9eb6a914b7b22e69ce81718302aef0a220cc7d9a9417d9 3723200 libgnutls30-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb 44958e2c9d6d7407057072c6359fed320221f0fe5ca139db727a4d3c33130312 760384 libgnutls30_3.6.5-2ubuntu1.1_amd64.deb 8850894b76894d3a212b52294e65c8ff532add17ae0f913011004d6dfb4e6364 54112 libgnutlsxx28-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb c445db6f3fd52829568b8b12de771bce0545a305ed4148c99802012c7f0f89c3 14468 libgnutlsxx28_3.6.5-2ubuntu1.1_amd64.deb Files: 06995a4d4608e309629a0c2a670c7de1 1013208 debug optional gnutls-bin-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb f900cc28e54043d3457f48072255a731 265392 net optional gnutls-bin_3.6.5-2ubuntu1.1_amd64.deb 5e8878113bd582cccb8b9fc4d940a81c 4111608 doc optional gnutls-doc_3.6.5-2ubuntu1.1_all.deb 03d160ab9f075f53b2a9f7c79ad54e99 10834 libs optional gnutls28_3.6.5-2ubuntu1.1_amd64.buildinfo 1f8ba4b3740b6510cfef1e8128ea898e 268249 raw-translations - gnutls28_3.6.5-2ubuntu1.1_amd64_translations.tar.gz 5be9b1f27dfe60b82dc5514986c5c40a 57016 debug optional libgnutls-dane0-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb ea7472a226f09e14c56807c8da9cea81 22872 libs optional libgnutls-dane0_3.6.5-2ubuntu1.1_amd64.deb 7bd13e765ab43f427937a39332d6eaf9 65084 debug optional libgnutls-openssl27-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb c714013f93a355b46994fac41815f7ae 22984 libs optional libgnutls-openssl27_3.6.5-2ubuntu1.1_amd64.deb 6addfec823bd4bccd45f6f48d2d87152 786216 libdevel optional libgnutls28-dev_3.6.5-2ubuntu1.1_amd64.deb 21fc9bead15255956e76bd189b59f3ad 3723200 debug optional libgnutls30-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb c2c8b65a99cfa475f42d1fd227788ba1 760384 libs optional libgnutls30_3.6.5-2ubuntu1.1_amd64.deb c3d0115b763b99ff862bf4a3aaf5b77b 54112 debug optional libgnutlsxx28-dbgsym_3.6.5-2ubuntu1.1_amd64.ddeb 0805557972f5c8401af32357d4a79928 14468 libs optional libgnutlsxx28_3.6.5-2ubuntu1.1_amd64.deb Original-Maintainer: Debian GnuTLS Maintainers