-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 18 Apr 2015 19:11:01 +0200 Source: gnutls28 Binary: libgnutls28-dev libgnutls-deb0-28 libgnutls28-dbg gnutls-bin gnutls-doc guile-gnutls libgnutlsxx28 libgnutls-openssl27 Architecture: source i386 all Version: 3.3.8-7 Distribution: unstable Urgency: medium Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Andreas Metzler <ametzler@debian.org> Description: gnutls-bin - GNU TLS library - commandline utilities gnutls-doc - GNU TLS library - documentation and examples guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-deb0-28 - GNU TLS library - main runtime library libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dbg - GNU TLS library - debugger symbols libgnutls28-dev - GNU TLS library - development files libgnutlsxx28 - GNU TLS library - C++ runtime library Closes: 782776 Changes: gnutls28 (3.3.8-7) unstable; urgency=medium . * 45_eliminated-double-free.diff 46_Better-fix-for-the-double-free.diff: Pull two patches from upstream to a use-after-free flaw in gnutls_x509_ext_import_crl_dist_points(). CVE-2015-3308 Closes: #782776 Checksums-Sha1: 21d56b9a34121f8174eb2b974d2c66e7ae5778a7 2913 gnutls28_3.3.8-7.dsc a1c5c7d81c61148c65fe8168ed7bed52f92b9475 90340 gnutls28_3.3.8-7.debian.tar.xz cb69010ab40d21838eb89f87afbec2d6e3bb1a2a 680562 libgnutls28-dev_3.3.8-7_i386.deb 57506ec872921952571767e6ab6e3ad35c645cd6 708722 libgnutls-deb0-28_3.3.8-7_i386.deb b8e5fa35c2de0ad535ba4ad4e8e4cd6247b6dd2d 1916172 libgnutls28-dbg_3.3.8-7_i386.deb 2af3b7040a27e2948a0947177fe728cf153b0c10 309614 gnutls-bin_3.3.8-7_i386.deb ad9b39bb8c319182b1af34511b375c2c04490b93 3620666 gnutls-doc_3.3.8-7_all.deb 065280718c2cfcf582034b981d4011acf6e720d9 175256 guile-gnutls_3.3.8-7_i386.deb f9aa86d0c9dcc019ddf1ddaf55ade407e631350e 15406 libgnutlsxx28_3.3.8-7_i386.deb 7601ddd1f1cd7a27e09e9b1d3a220906600c812a 142890 libgnutls-openssl27_3.3.8-7_i386.deb Checksums-Sha256: 53362cab0b80af8e0dc0231180c21df7d3cba6669f10314b531b0b2bebe5f48c 2913 gnutls28_3.3.8-7.dsc 6840c92aad3e235ced424c05f7506f5a4f711d3eab2a6794f4d3c9a8a3f0161a 90340 gnutls28_3.3.8-7.debian.tar.xz 608611b976cff0de136868fb44e997cbf8dbae0f545084720df436ee0cab3059 680562 libgnutls28-dev_3.3.8-7_i386.deb c670a6073d95bdb1720d7f9e4e8167396e6102111de186904be7c8976f9a6564 708722 libgnutls-deb0-28_3.3.8-7_i386.deb 1471ead56ad40e90b8d6d97db9b09b92069f7c79528dc5fc05f7382d57c73b3a 1916172 libgnutls28-dbg_3.3.8-7_i386.deb 55b467289741aae0e8b8db80abce3f647d1201e8035a0e4f155de7a0b26f2125 309614 gnutls-bin_3.3.8-7_i386.deb 722a82c98c41124736633cf8d0c5b0a1a2de8407cec85c01fae54a74a08017c1 3620666 gnutls-doc_3.3.8-7_all.deb 5b186e4e68cf4cf5524af021c5f8b17004390e2be132ad9a88899f493652ef1a 175256 guile-gnutls_3.3.8-7_i386.deb 0a0c86a96e0e973b2ca18ada82a1655304789a1e15d09b55b635fdbd60432440 15406 libgnutlsxx28_3.3.8-7_i386.deb 5e3ca04f7429c5e1c513ccd3df26c17f97b252977a69a1dac5464bf9c1d32468 142890 libgnutls-openssl27_3.3.8-7_i386.deb Files: 3319badd0b4f77ce4b5ee51ee3b18447 2913 libs optional gnutls28_3.3.8-7.dsc e954b0f72d026c1336de822801cc0a52 90340 libs optional gnutls28_3.3.8-7.debian.tar.xz ee398024017abd7ed659b2dbbf5e2fab 680562 libdevel optional libgnutls28-dev_3.3.8-7_i386.deb aad790e9b1614cf8e2bc0ee92ffebb9a 708722 libs standard libgnutls-deb0-28_3.3.8-7_i386.deb bf1a63c913c4b3c04092a56baf2b7427 1916172 debug extra libgnutls28-dbg_3.3.8-7_i386.deb 671c78649afcb3b4f89f1ad06bf04b28 309614 net optional gnutls-bin_3.3.8-7_i386.deb 69a7abc95d14ad36a074816ca7afd464 3620666 doc optional gnutls-doc_3.3.8-7_all.deb eb9fb52ebab3a828bd5e1ec56ac8a483 175256 lisp optional guile-gnutls_3.3.8-7_i386.deb 8a4704883071154222e6c26a448901a7 15406 libs extra libgnutlsxx28_3.3.8-7_i386.deb 739c62a8d0dc9d26b3013fe7e26c9ed3 142890 libs standard libgnutls-openssl27_3.3.8-7_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVMpSfAAoJEKVPAYVDghSE4L4QAJn0IWSjH1kIQbShpRWfEMLq m8a0CK8JRtzjtK+iBOR8DdatkNIcR7sBntxiTWvHquK/38jorakFnGmVYbDj5x4l D/oeX+Jgdku59RVDEss0o6Rufb9Wcq0dD5uIxeLj6AsRMPF8KOWfWkXg2VbRMg4Y 1QjxZkvRUx9KxItFN0KhRLuZ9IDW1SYk1RCSAPfUdRoq3auIIJ8q4eONv8mJjsz/ p39mDmIpQ8F3qMM/zfSJr5QNfEqeALTn33ID33MBUi4U1RMiZUSenohayKKCajZO 28TIoJQ1mDlWiL8ZacFzqK+N+4Gjcav2rEjPf6EMtNqr9Sp/Uh0IEJKzAhnYGipN BwbelNzVR10wJv6GUtLHlox8u9U60N4yxWTdlNQaByqBE0UfKkU3QkPi6pQGYjXs l1pBJ1x2ReeCBioqVPIJEMkc07gPfU7gplnIzX7D/hBROJN9VrBMoQ7UP6TFDXDR 7oxJKBwdZuhMENYTPv/ax3aeLovl2EcySMc3PsOBpyfs2eUZcWKMK78W8XDgULn3 ZQBd1hh/ay+qg0VzHJZU7nMT8Jaxgs9PXY3Paz+Ah5t1YTxH+tzbYikP9X+Rvgs2 rsJS2GVfDXBE9IWC3Pa90bi7kIJyhhuVpabi7HBjKjDKOFhPT/1cjFr9EfJFlNwv c5sviT5v+K6BZftlO8X4 =ZSJ5 -----END PGP SIGNATURE-----