Format: 1.8 Date: Fri, 20 Mar 2015 09:08:01 -0400 Source: gnutls26 Binary: libgnutls-dev libgnutls26 libgnutls26-dbg gnutls-bin gnutls26-doc libgnutlsxx27 libgnutls-openssl27 Architecture: all i386_translations i386 Version: 2.12.23-12ubuntu2.2 Distribution: trusty Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: gnutls-bin - GNU TLS library - commandline utilities gnutls26-doc - GNU TLS library 2.x - documentation and examples libgnutls-dev - GNU TLS library - development files libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls26 - GNU TLS library - runtime library libgnutls26-dbg - GNU TLS library - debugger symbols libgnutlsxx27 - GNU TLS library - C++ runtime library Changes: gnutls26 (2.12.23-12ubuntu2.2) trusty-security; urgency=medium . * SECURITY UPDATE: signature forgery issue - debian/patches/CVE-2015-0282.patch: make sure the signature algorithms match in lib/gnutls_algorithms.c, lib/gnutls_algorithms.h, lib/gnutls_pubkey.c, lib/gnutls_sig.c, lib/x509/common.h, lib/x509/crq.c, lib/x509/privkey.c, lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_int.h. - CVE-2015-0282 * SECURITY UPDATE: certificate algorithm consistency issue - debian/patches/CVE-2015-0294.patch: make sure the two signature algorithms match on cert import in lib/x509/x509.c. - CVE-2015-0294 Checksums-Sha1: 87bdb72e2237e5e1307844c5358ac7000abae54d 2358994 gnutls26-doc_2.12.23-12ubuntu2.2_all.deb bbfa2423278683b1e6d9f7c0ef671eda5e07773a 115910 gnutls26_2.12.23-12ubuntu2.2_i386_translations.tar.gz 734875ac763a338c664f92492fcac44a912879df 368472 libgnutls-dev_2.12.23-12ubuntu2.2_i386.deb 15c1aaabc9dde73e9307d116c3ce5a7f15391362 373848 libgnutls26_2.12.23-12ubuntu2.2_i386.deb f80cfbb2f7810654abc2ff18d3a20e2a949fc697 1295440 libgnutls26-dbg_2.12.23-12ubuntu2.2_i386.deb 336de16d11a4a2e8d8341a6d003d25f0b84fc0a1 108992 gnutls-bin_3.0.11+really2.12.23-12ubuntu2.2_i386.deb aa269c35022482255e159d9274c08e6d2954b454 17920 libgnutlsxx27_2.12.23-12ubuntu2.2_i386.deb 77648d2a93efff7ec686a4ef9e6a57c2bbb3851e 18364 libgnutls-openssl27_2.12.23-12ubuntu2.2_i386.deb Checksums-Sha256: 6532bae23c147937cca15e16922531c66a2c9382a8758a42c53bd6a760c42483 2358994 gnutls26-doc_2.12.23-12ubuntu2.2_all.deb 7c371efc4733d3d0a3e13cebb7d9692dde13661829a3ab51f8056e2d745b9dbb 115910 gnutls26_2.12.23-12ubuntu2.2_i386_translations.tar.gz 9dececc63b0d6538c56ff88549fa054bd20625a9a82e15d1d465d15be732746c 368472 libgnutls-dev_2.12.23-12ubuntu2.2_i386.deb 21adf198725c7417fec154205a0ccd3e43da3a75184bcb2a3748d7a0d1d0a92e 373848 libgnutls26_2.12.23-12ubuntu2.2_i386.deb 6be449a50bd1fd90cd97527a39fe5eb795c3048b52aa2e0ccb1b56012896dac9 1295440 libgnutls26-dbg_2.12.23-12ubuntu2.2_i386.deb d2d3f9861398f3396e124863a854d7d98f154acd4e705133bc2bbc77354826cf 108992 gnutls-bin_3.0.11+really2.12.23-12ubuntu2.2_i386.deb a44093a7a6e087716a6ce675353a5a10847227f488941ab44fb23a9efa206024 17920 libgnutlsxx27_2.12.23-12ubuntu2.2_i386.deb b784e6e69a05d0d0543275129d18181ec462c55fea52c1afbdfe075442b3db3d 18364 libgnutls-openssl27_2.12.23-12ubuntu2.2_i386.deb Files: d7ba8f19f5a828d5df9f8c309cdcae0a 2358994 doc optional gnutls26-doc_2.12.23-12ubuntu2.2_all.deb 245a01851a2100c13c3cad99980e466f 115910 raw-translations - gnutls26_2.12.23-12ubuntu2.2_i386_translations.tar.gz b49c9fe00cde2db81e63087c8dc0af43 368472 libdevel optional libgnutls-dev_2.12.23-12ubuntu2.2_i386.deb 2cc665e3bcef6ab6c5150eeadff61852 373848 libs standard libgnutls26_2.12.23-12ubuntu2.2_i386.deb c7362cbb734d160303475e407da18fc5 1295440 debug extra libgnutls26-dbg_2.12.23-12ubuntu2.2_i386.deb 78b509901ef1199c0378f619efca80e0 108992 net optional gnutls-bin_3.0.11+really2.12.23-12ubuntu2.2_i386.deb 73b5e85091e2a13a528454019f080e6c 17920 libs extra libgnutlsxx27_2.12.23-12ubuntu2.2_i386.deb 16a1d141417d1b6b1345dec74276fec3 18364 libs standard libgnutls-openssl27_2.12.23-12ubuntu2.2_i386.deb Original-Maintainer: Debian GnuTLS Maintainers