-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 3.0 (quilt) Source: gnutls28 Binary: libgnutls28-dev, libgnutls-deb0-28, libgnutls28-dbg, gnutls-bin, gnutls-doc, guile-gnutls, libgnutlsxx28, libgnutls-openssl27 Architecture: any all Version: 3.3.8-6 Maintainer: Debian GnuTLS Maintainers <[email protected]> Uploaders: Andreas Metzler <[email protected]>, Eric Dorland <[email protected]>, James Westby <[email protected]>, Simon Josefsson <[email protected]> Homepage: http://www.gnutls.org/ Standards-Version: 3.9.5 Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-gnutls/gnutls.git Vcs-Git: git://anonscm.debian.org/pkg-gnutls/gnutls.git Build-Depends: debhelper (>= 9), nettle-dev (>= 2.7), zlib1g-dev, libtasn1-6-dev (>= 3.9), autotools-dev, guile-2.0-dev [!ia64 !m68k], datefudge, libp11-kit-dev (>= 0.20.7), pkg-config, chrpath, libidn11-dev, autogen (>= 1:5.16-0), bison, dh-autoreconf, libgmp-dev (>= 2:6), libopts25-dev Build-Depends-Indep: gtk-doc-tools, texinfo (>= 4.8) Build-Conflicts: libgnutls-dev, libp11-kit-dev (= 0.21.2-1) Package-List: gnutls-bin deb net optional arch=any gnutls-doc deb doc optional arch=all guile-gnutls deb lisp optional arch=amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390,s390x,sparc,hurd-i386 libgnutls-deb0-28 deb libs standard arch=any libgnutls-openssl27 deb libs standard arch=any libgnutls28-dbg deb debug extra arch=any libgnutls28-dev deb libdevel optional arch=any libgnutlsxx28 deb libs extra arch=any Checksums-Sha1: 2c07ed3f0ec3284820985085d63311e8b73cb48f 6153180 gnutls28_3.3.8.orig.tar.xz 18496ae45208657556f1a4e6fb382559471801d3 89416 gnutls28_3.3.8-6.debian.tar.xz Checksums-Sha256: bd4642f180e19632f4ed3a1e62d60c824c7b695f5cddf41a8fba1b272eaef046 6153180 gnutls28_3.3.8.orig.tar.xz 68fa031fcc1e9c506ebff7c5844516b62abcedf122ca0f9fe4136dea8a297ef2 89416 gnutls28_3.3.8-6.debian.tar.xz Files: b57e6b7630bdba9ea8eb28ff0eb29c2f 6153180 gnutls28_3.3.8.orig.tar.xz 6d591c2d0a3a656d632b345a75a312a0 89416 gnutls28_3.3.8-6.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJU8cZBAAoJEKVPAYVDghSE3OIQAJ513AnZd7JY3e6ZpjeGpIZx gRXjOAjybp8GfqAH6s5y4chtt6M8z0v7Uu+Uvu9cD7D2aIZuQF2TJZJpRFuPyrSc 7PJzfz+Jz7XEs5zZmCCeULX+L8mgy6JpFquYPF7LOjRvw8PkyuL7DDkc27NvY6lc wVScuN/nR+cPlN6irUK8/4ooQ0YPVozqjMfQP5Jy9bJj5czQopoeFYQPliM1cWZb 47FKi9egI7PEpELcCzG+Rls2rTga3SUqsH3lKA5ZbZd54XHfz/ORVla6/+/DPrCe oMn9ZISH/3QEDTZBIqvJr5KivtnxBJVDwObG+Wnp6AJrmuEVGG1K/110eczsfrrn Dz9IFyyJ1SW3AxkamxW66GXFday6p2Wbaika6vG263O7mL4V5eK+3wupuuq/rgN+ 6YO33zmMZKXU89uCvzbMh0oREnuHTQk0JY8yXSf6SyTbS3ibdJNoCeSfakKO4l+Y /xZqHSSuXBtwPkCRk3abiPUwLq3U6FZEcJLHBJdkWXsULL5L1uueWS/RIwNX3+oX CLvbevnYkSi7pkA/NJpmX8Bj20t1YGk3ovEyTI52fMQXQLCEwo0I9m9J3tHwDZ/A 6Tmd/+me3TzrtbwKYNjhK+YpxVcPsV2dMUjd5Iv7ZWCmT0OyDt5LuxfCaVyQAPYy DIs4hpbXxLfQv6BrH48M =VHyf -----END PGP SIGNATURE----- Changes: gnutls28 (3.3.8-6) unstable; urgency=medium * 39_check-whether-the-two-signatur.patch: Pull and unfuzz 6e76e9b9fa845b76b0b9a45f05f4b54a052578ff from upstream GIT: On certificate import check whether the two signature algorithms match. CVE-2015-0294. Closes: #779428 -- Andreas Metzler <[email protected]> Sat, 28 Feb 2015 14:17:21 +0100
