Format: 1.8 Date: Fri, 20 Mar 2015 09:08:01 -0400 Source: gnutls26 Binary: libgnutls-dev libgnutls26 libgnutls26-dbg gnutls-bin gnutls26-doc libgnutlsxx27 libgnutls-openssl27 Architecture: amd64 amd64_translations Version: 2.12.23-12ubuntu2.2 Distribution: trusty Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: gnutls-bin - GNU TLS library - commandline utilities gnutls26-doc - GNU TLS library 2.x - documentation and examples libgnutls-dev - GNU TLS library - development files libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls26 - GNU TLS library - runtime library libgnutls26-dbg - GNU TLS library - debugger symbols libgnutlsxx27 - GNU TLS library - C++ runtime library Changes: gnutls26 (2.12.23-12ubuntu2.2) trusty-security; urgency=medium . * SECURITY UPDATE: signature forgery issue - debian/patches/CVE-2015-0282.patch: make sure the signature algorithms match in lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, lib/gnutls_pubkey.c, lib/gnutls_sig.c, lib/x509/common.h, lib/x509/crq.c, lib/x509/privkey.c, lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_int.h. - CVE-2015-0282 * SECURITY UPDATE: certificate algorithm consistency issue - debian/patches/CVE-2015-0294.patch: make sure the two signature algorithms match on cert import in lib/x509/x509.c. - CVE-2015-0294 Checksums-Sha1: bb1755c37e2324722721bc9add138e6b4498a727 371722 libgnutls-dev_2.12.23-12ubuntu2.2_amd64.deb b23552b7d371b9565c7dfbb3df91a425f8d23cb4 114283 gnutls26_2.12.23-12ubuntu2.2_amd64_translations.tar.gz 261d02d588f3f9c10d93aefa742c4b81f1a17883 393198 libgnutls26_2.12.23-12ubuntu2.2_amd64.deb 6af3f7a0d4cfc73f068f1746daccf25f2b91a732 1432078 libgnutls26-dbg_2.12.23-12ubuntu2.2_amd64.deb da20c6fdc98f4be760d017f4001f7dba7682b41b 113616 gnutls-bin_3.0.11+really2.12.23-12ubuntu2.2_amd64.deb eb0b64258247e3d3e5e4603527a3abfd0cb4f1fd 17310 libgnutlsxx27_2.12.23-12ubuntu2.2_amd64.deb 8ee994d00b867281728f5d37be00424b7f0f2816 18330 libgnutls-openssl27_2.12.23-12ubuntu2.2_amd64.deb Checksums-Sha256: 3bb7bfb53ab8fb674fdce99ac21e8ce68a7162b6aa63d216ba79fd64925354c1 371722 libgnutls-dev_2.12.23-12ubuntu2.2_amd64.deb 58b9c045f7b56fb8bd572de38fa271ea78aa83540879d1bd4c10f8597ac7a08e 114283 gnutls26_2.12.23-12ubuntu2.2_amd64_translations.tar.gz 2c6f8b5880fa805f7fedfba606d44aa02a5b1aaa70102b37c758c0ce231b2b5d 393198 libgnutls26_2.12.23-12ubuntu2.2_amd64.deb f006793ec2c6b96e65e475610878ee5b5f9c5ab6151d369e86379cf301bf0cb4 1432078 libgnutls26-dbg_2.12.23-12ubuntu2.2_amd64.deb 770ce562349db7db48352783581143af8fa8d848f67aee5bdbb48267ed9de8fa 113616 gnutls-bin_3.0.11+really2.12.23-12ubuntu2.2_amd64.deb 52f8c893310aae5cc934ef6561a8dcb584a15b687448f4ea7cb035256bd08a73 17310 libgnutlsxx27_2.12.23-12ubuntu2.2_amd64.deb 9c49ffb1c1c2ac0ebc1a42ea947f35863a75939c468071d24e2c4857ee3591c6 18330 libgnutls-openssl27_2.12.23-12ubuntu2.2_amd64.deb Files: 4489c8d51827d2d58ac90e988f134109 371722 libdevel optional libgnutls-dev_2.12.23-12ubuntu2.2_amd64.deb f9313244d990e2cf6f2129606f8615e7 114283 raw-translations - gnutls26_2.12.23-12ubuntu2.2_amd64_translations.tar.gz 5cb53fc1d8fc987061c0f722631dc902 393198 libs standard libgnutls26_2.12.23-12ubuntu2.2_amd64.deb 8560fc70b6a55ad35ea2182d9ee16dc3 1432078 debug extra libgnutls26-dbg_2.12.23-12ubuntu2.2_amd64.deb f1956315cac84058f90df6c2bc5c7236 113616 net optional gnutls-bin_3.0.11+really2.12.23-12ubuntu2.2_amd64.deb 1b70ab5db915dbb35dd743045c800eb9 17310 libs extra libgnutlsxx27_2.12.23-12ubuntu2.2_amd64.deb b9dd685036da5230e9ea784507fe95f1 18330 libs standard libgnutls-openssl27_2.12.23-12ubuntu2.2_amd64.deb Original-Maintainer: Debian GnuTLS Maintainers