-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 25 Apr 2021 12:55:14 +0200
Source: gnutls28
Architecture: source
Version: 3.7.1-4
Distribution: unstable
Urgency: medium
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Changes:
gnutls28 (3.7.1-4) unstable; urgency=medium
.
* Pull fixes from upstream Git master
+ Ensure array allocations overflow safe.
https://gitlab.com/gnutls/gnutls/-/issues/1179
56_15-mem-add-_gnutls_reallocarray-and-_gnutls_reallocarra.patch
56_16-pkcs11x-find_ext_cb-fix-error-propagation.patch
56_17-build-avoid-potential-integer-overflow-in-array-allo.patch
56_18-build-avoid-integer-overflow-in-additions.patch
56_19-_gnutls_calloc-remove-unused-function.patch
+ Add option to disable TLS 1.3 middlebox compatibility mode
https://gitlab.com/gnutls/gnutls/-/issues/1208
56_20-priority-add-option-to-disable-TLS-1.3-middlebox-com.patch
(Changes gperf input file, add b-d on gperf.)
+ Fix session-id changing when responding to HelloRetryRequest
56_24-handshake-don-t-regenerate-legacy_session_id-in-seco.patch
https://gitlab.com/gnutls/gnutls/-/issues/1210
+ Fix timing of sending TLSv1.3 early data.
56_28-handshake-fix-timing-of-sending-early-data.patch
https://gitlab.com/gnutls/gnutls/-/issues/1146
Checksums-Sha1:
46a6a118c31a7c2412152389a8fbd400fb450b63 3487 gnutls28_3.7.1-4.dsc
bc71ef2caad6120a87669352bca910ab6054c02e 81652 gnutls28_3.7.1-4.debian.tar.xz
Checksums-Sha256:
5529e4d874a8e482059617509067c1cc153338615bcc7961ab248756d5ef98a1 3487 gnutls28_3.7.1-4.dsc
061ddee27fad3325b7e63d13bbc7a4aa56291f082349f37b24c594abcb75d609 81652 gnutls28_3.7.1-4.debian.tar.xz
Files:
efff8d78cb3cc3e82c4285ec2beafeaa 3487 libs optional gnutls28_3.7.1-4.dsc
59e0d528430e2fdc4e3023897f121ffc 81652 libs optional gnutls28_3.7.1-4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=EOwc
-----END PGP SIGNATURE-----
