Format: 1.7 Date: Fri, 20 Feb 2009 13:05:18 -0600 Source: gnutls13 Binary: libgnutls-dev libgnutlsxx13 libgnutls13 gnutls-bin gnutls-doc libgnutls13-dbg Architecture: powerpc_translations powerpc Version: 1.6.3-1ubuntu0.4 Distribution: gutsy Urgency: low Maintainer: Ubuntu/powerpc Build Daemon Changed-By: Jamie Strandboge Description: gnutls-bin - the GNU TLS library - commandline utilities libgnutls-dev - the GNU TLS library - development files libgnutls13 - the GNU TLS library - runtime library libgnutls13-dbg - GNU TLS library - debugger symbols libgnutlsxx13 - the GNU TLS library - C++ runtime library Launchpad-Bugs-Fixed: 305264 305264 Changes: gnutls13 (1.6.3-1ubuntu0.4) gutsy-security; urgency=low . * Fix for certificate chain regressions introduced by fixes for CVE-2008-4989 * debian/patches/91_CVE-2008-4989.diff: updated to upstream's final 2.4.2 - 2.4.3 patchset for lib/x509/verify.c to fix CVE-2008-4989 and address all known regressions. To summarize from upstream: - Fix X.509 certificate chain validation error (CVE-2008-4989) - Fix chain verification for chains that end with RSA-MD2 CAs (LP: #305264) - Deprecate X.509 validation chains using MD5 and MD2 signatures - Accept chains where intermediary certs are trusted (LP: #305264) Files: 3937687dedc85f2834e323100e670f2b 12175 raw-translations - gnutls13_1.6.3-1ubuntu0.4_powerpc_translations.tar.gz 6ea542435c05efc5144e2327ff84aa28 439650 libdevel optional libgnutls-dev_1.6.3-1ubuntu0.4_powerpc.deb 42213a3c9b01a85555155a462e73425f 337076 libs important libgnutls13_1.6.3-1ubuntu0.4_powerpc.deb d5d11ce6848c30126cc349d90f53046b 792602 devel extra libgnutls13-dbg_1.6.3-1ubuntu0.4_powerpc.deb 06b3d6fd1b20077334bc1fc5763e5fd3 231298 net optional gnutls-bin_1.6.3-1ubuntu0.4_powerpc.deb 749bfa2b777c33e56b263b7abd88e9e0 105368 libs optional libgnutlsxx13_1.6.3-1ubuntu0.4_powerpc.deb Original-Maintainer: Debian GnuTLS Maintainers