-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Feb 2014 16:37:36 +0100 Source: gnutls26 Binary: libgnutls-dev libgnutls26 libgnutls26-dbg gnutls26-doc libgnutlsxx27 libgnutls-openssl27 Architecture: source all i386 Version: 2.12.23-12 Distribution: unstable Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Andreas Metzler <ametzler@debian.org> Description: gnutls26-doc - GNU TLS library 2.x - documentation and examples libgnutls-dev - GNU TLS library - development files libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls26 - GNU TLS library - runtime library libgnutls26-dbg - GNU TLS library - debugger symbols libgnutlsxx27 - GNU TLS library - C++ runtime library Changes: gnutls26 (2.12.23-12) unstable; urgency=high . * 26_fix_rejection-of-v1-intermedi.diff pulled and unfuzzed from GIT 3.x: A version 1 intermediate certificate will be considered as a CA certificate by default (something that deviates from the documented behavior). CVE-2014-1959 / GNUTLS-SA-2014-1 Checksums-Sha1: cdc1817cf26068a1cbb5d909d396a3eeca5d0221 2583 gnutls26_2.12.23-12.dsc da53e8d9ebef32fec2fc2380bbcd659e8f325149 27860 gnutls26_2.12.23-12.debian.tar.xz 4c35b47831eee6dfd6ddfaeeb9ec79544566e843 2459720 gnutls26-doc_2.12.23-12_all.deb 596761e6878a54e5c26ebe263a347ada0b8a5937 569542 libgnutls-dev_2.12.23-12_i386.deb ce884300b218dd388d0817c8724710b19285169c 511202 libgnutls26_2.12.23-12_i386.deb 06a03e44d0b34ca612575f493d17369629851665 1454804 libgnutls26-dbg_2.12.23-12_i386.deb dccbaaac41173bddf80084a890f4babd8f831521 219142 libgnutlsxx27_2.12.23-12_i386.deb 90b2a70938095b37788075150b5acc38c6ac762b 219428 libgnutls-openssl27_2.12.23-12_i386.deb Checksums-Sha256: 6a631cea500f3055c1504129e5cc4c6b46a0ea510244c29759a69c9568ba2ad4 2583 gnutls26_2.12.23-12.dsc 0a53cfe2a73fb5a772c489b7a317e828a843fba60f313b02c3bc91cec821bbcb 27860 gnutls26_2.12.23-12.debian.tar.xz 31e8f37518af4722f95651d1ef22fa700eedd498021197c408e88dfdf3642f3f 2459720 gnutls26-doc_2.12.23-12_all.deb dfcf080bd439d683a2c9e1abc6f968aabb61522947e518e4aaa175aaaf8cfc84 569542 libgnutls-dev_2.12.23-12_i386.deb 38c532bb722ebeaee1b8ec9045c8a3324af128b2b11cd024c225254202467689 511202 libgnutls26_2.12.23-12_i386.deb ffc32dfaf177d5741f0fba539d2bdcf60a4722b3fe247bbe127eec8371cac452 1454804 libgnutls26-dbg_2.12.23-12_i386.deb 8d20ae34413463414c20a8fad60390c39d135bb990db2af2570e0fb89297a008 219142 libgnutlsxx27_2.12.23-12_i386.deb 7f616a4ea7f37fdc1ff1a79be74f78d9987c432cc8d4acbd8b2bcf9a5d150f02 219428 libgnutls-openssl27_2.12.23-12_i386.deb Files: 583d8b9facb43d8d941a9a48d7283f3c 2583 libs optional gnutls26_2.12.23-12.dsc da2cbeb03cf20ba3f94cb290d7ec58fb 27860 libs optional gnutls26_2.12.23-12.debian.tar.xz 0799d016e2245564b53d73199c7576f9 2459720 doc optional gnutls26-doc_2.12.23-12_all.deb 169e99ecf892d568acc6a9e2eb7eb622 569542 libdevel optional libgnutls-dev_2.12.23-12_i386.deb 889f67aceea97be5fae42ca589a8c2ec 511202 libs standard libgnutls26_2.12.23-12_i386.deb ac7c326aed0ef8e8b8a559bccf8b6e13 1454804 debug extra libgnutls26-dbg_2.12.23-12_i386.deb 52c1ba1cc6d8140c0d885fd93d4db54c 219142 libs extra libgnutlsxx27_2.12.23-12_i386.deb 9df117f63b8c817466f663f17c7600f1 219428 libs standard libgnutls-openssl27_2.12.23-12_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCgAGBQJS/4u3AAoJEKVPAYVDghSETaQP/j57HF+JtEwngYdsosb+e+tf COE/kPGUw8neBrp9CjGLnBy18qJ8OBSpQ7OpIF4zoy0ML22fC1k9ZPQ1uSbM8Z0r 6K7kHsH9wwlPN7AksxMFbEyxIlih1YS30USmd59/bvHcVxgh/ehP57B/3087e3bD GpgAliDoxITxFykt0xQ5yHx1MknfQizJA4hC17jREBz/XN0eqbg/PkDe2vpmU0yY B2V/HqLon4+luQlYewQDcBwk2wMkmoUy04Ywd26CWPSfBPyP1VcCgvDXj8VV+XxV mrR74TucP52EQ90uB6NhGA1repIYv9B+9ONE5QEdjjGQ/SwEMzVMp7e0smel2yis dikWKusRgYkglfG40Sh/EMnNi/EvrPbsrSVj0vGxHBQ+b6j4vHmrZ6or0CmnhIlc qA6TULqhgG0EiuFWCfTW+DlztaDvFgVo+XQmGKyQ++OLVv2nKv4M1OfPF+QkFiVL UcmbjRjWS4GzhLQYzsYWX/8tyBTp09d6Nuz0wEYi9Fkz0AYVaMLOWl6uilA6t0h2 RgaEFYfyWrQ+E2D8thCirLzBz0JCNqEFPhlZmpbn/LRjRPea1BjzaMxuBMRuaLuA OqCVoGYhtTsxYdUk653L2qzZlkpYnnnWZnqvqIxE77PAQeWlG6MHQGAF5dlzKBlc yi2t4rxHLU8i7h4FdBgl =VQn8 -----END PGP SIGNATURE-----