Format: 1.8
Date: Tue, 28 May 2019 13:14:35 -0400
Source: gnutls28
Binary: libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc libgnutlsxx28 libgnutls-openssl27 libgnutls-dane0
Architecture: amd64 all amd64_translations
Version: 3.6.4-2ubuntu1.2
Distribution: cosmic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-007.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 gnutls-bin - GNU TLS library - commandline utilities
 gnutls-doc - GNU TLS library - documentation and examples
 libgnutls-dane0 - GNU TLS library - DANE security support
 libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
 libgnutls28-dev - GNU TLS library - development files
 libgnutls30 - GNU TLS library - main runtime library
 libgnutlsxx28 - GNU TLS library - C++ runtime library
Changes:
 gnutls28 (3.6.4-2ubuntu1.2) cosmic-security; urgency=medium
 .
   * SECURITY UPDATE: double free in cert verification API
     - debian/patches/CVE-2019-3829-1.patch: automatically NULLify after
       gnutls_free() in lib/includes/gnutls/gnutls.h.in.
     - debian/patches/CVE-2019-3829-2.patch: remove redundant resets of
       variables after free().
     - debian/patches/CVE-2019-3829-3.patch: fix dereference of NULL pointer
       in lib/x509/x509.c.
     - CVE-2019-3829
   * SECURITY UPDATE: uninitialized pointer access
     - debian/patches/CVE-2019-3836.patch: add missing initialization of
       local variable in lib/handshake-tls13.c.
     - CVE-2019-3836
Checksums-Sha1:
 8db2a63653fe7ab240bdcaf559786bbc94afef4d 998424 gnutls-bin-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 b8decd72acf4e211b3f80e87b71e038a863b4173 262680 gnutls-bin_3.6.4-2ubuntu1.2_amd64.deb
 b011608586f2dab6265b02593c4af9997e4cbe4d 4067584 gnutls-doc_3.6.4-2ubuntu1.2_all.deb
 9c352bfe297f8456b0be3600386b7ca8decc3eda 10842 gnutls28_3.6.4-2ubuntu1.2_amd64.buildinfo
 8e1baa3f23dff641f1d0ef18500b86457d5acd8a 266959 gnutls28_3.6.4-2ubuntu1.2_amd64_translations.tar.gz
 b14331d8a3fba25b4fd0f8f6daa3f541d608757f 55620 libgnutls-dane0-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 813b1fd48da2474a5e94e31b2ce9ca63bcd6ab87 22644 libgnutls-dane0_3.6.4-2ubuntu1.2_amd64.deb
 ef0ad8658b6909f4a8cfe564ae43748b1ae6af31 63756 libgnutls-openssl27-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 5a995c7bf6a6cddb1bdc28d2bd4aa17d52870fdf 22712 libgnutls-openssl27_3.6.4-2ubuntu1.2_amd64.deb
 01451dd5ea1abaa009b58efdbaeb0cadd7b85d9a 773664 libgnutls28-dev_3.6.4-2ubuntu1.2_amd64.deb
 0fcb383c489796593df5623f85ef8a75333e99cb 3633888 libgnutls30-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 c6a28300780472c99e6a829af3ab0e9347700dd7 747880 libgnutls30_3.6.4-2ubuntu1.2_amd64.deb
 b4fea98bf91b5c4363837d2921ace0c947461712 54032 libgnutlsxx28-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 469b72475e56f2513982f3c896e178f0dbaff24d 14480 libgnutlsxx28_3.6.4-2ubuntu1.2_amd64.deb
Checksums-Sha256:
 a69c1bb315bb9554df7a8f6565925ad851bf672892e9108256863268832185dc 998424 gnutls-bin-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 ff2ed55232e875b8476c1a7e05ef183ef4cc5cd6cb3584036e9ff0041c47fc4f 262680 gnutls-bin_3.6.4-2ubuntu1.2_amd64.deb
 e434fb3ead838810d560648d58685b6fdb2e235a86cbcfd69cf1742e3e3dda70 4067584 gnutls-doc_3.6.4-2ubuntu1.2_all.deb
 9f380024497665c5e8cad055583400b2a816ac12a0d63f71fba9fd6b3023ede6 10842 gnutls28_3.6.4-2ubuntu1.2_amd64.buildinfo
 27baae1da28fbb51161fb9cbf2e9457ba6fd74467fe530ee4ad6a44719bb6895 266959 gnutls28_3.6.4-2ubuntu1.2_amd64_translations.tar.gz
 5da0968e32ca76495fad267222ba5ebc6d4cfa1f3365e125c72a2d5ce9c6ece0 55620 libgnutls-dane0-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 a7b63e42fed970890d6ad923527e6c8a18ea34e2d8deca108f2fcbe406c8276d 22644 libgnutls-dane0_3.6.4-2ubuntu1.2_amd64.deb
 5c2929e1caa702961e4bc3cd5bf38f68e2ad3a01a6ec4a7f948c2264e14e4005 63756 libgnutls-openssl27-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 4df5f445be75eaeb98d0fdcb942a7011906d901c6795d5e45326e8ff199c07a8 22712 libgnutls-openssl27_3.6.4-2ubuntu1.2_amd64.deb
 f55bf71aec523a04bdc1b05caa26e2ce9dfa6be5b5e27d8b675ebae609030f24 773664 libgnutls28-dev_3.6.4-2ubuntu1.2_amd64.deb
 cff6895423d941a612189d87a2ab5eaeeea5f57841915d3645ababa6eea5b4e4 3633888 libgnutls30-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 98b2a1638bedd47854dbcacdc6b90ab0661b9e5e97fcaf252bd897472932137d 747880 libgnutls30_3.6.4-2ubuntu1.2_amd64.deb
 5ff34d815886fd1281dd8f14c2ab2078e56aaba4378c9112481e3d76bf620bd9 54032 libgnutlsxx28-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 308d3f784c025aee08b85ff9574db23434c443aee49b94bc4cdedc7702c05d33 14480 libgnutlsxx28_3.6.4-2ubuntu1.2_amd64.deb
Files:
 b6a9b4f5d0368a07205ad4fec938809e 998424 debug optional gnutls-bin-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 4e70a8a3e66de075c32a3e023ed0c00e 262680 net optional gnutls-bin_3.6.4-2ubuntu1.2_amd64.deb
 634bafb24bcc8bcee5679c258fba3017 4067584 doc optional gnutls-doc_3.6.4-2ubuntu1.2_all.deb
 63beb1d1d89945e06de479ac28a1f516 10842 libs optional gnutls28_3.6.4-2ubuntu1.2_amd64.buildinfo
 f3534e64a06fb8ddcb735792cdf9a225 266959 raw-translations - gnutls28_3.6.4-2ubuntu1.2_amd64_translations.tar.gz
 15d0188beca8af34ac316589303cb854 55620 debug optional libgnutls-dane0-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 6c33e16ef910dae5b42c49e9464552c9 22644 libs optional libgnutls-dane0_3.6.4-2ubuntu1.2_amd64.deb
 d444e4f225ab9fe9d30259167a45b0c7 63756 debug optional libgnutls-openssl27-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 24bc87bf4b96692c67e564136e0739b0 22712 libs optional libgnutls-openssl27_3.6.4-2ubuntu1.2_amd64.deb
 0f09508bf35c5fea807c37420f5d9b09 773664 libdevel optional libgnutls28-dev_3.6.4-2ubuntu1.2_amd64.deb
 15a4d51b50e9f13cb59a55edab14c5e4 3633888 debug optional libgnutls30-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 63e80d22e956ee218eda00a6d3c5f759 747880 libs optional libgnutls30_3.6.4-2ubuntu1.2_amd64.deb
 0efcc4b82bcad0099ec2328b54baebe4 54032 debug optional libgnutlsxx28-dbgsym_3.6.4-2ubuntu1.2_amd64.ddeb
 39896fd3574c94b9da20cee692373eca 14480 libs optional libgnutlsxx28_3.6.4-2ubuntu1.2_amd64.deb
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>