[Pkg-gnutls-commits] r872 - in /packages/gnutls26/branches/branch2.9.x/debian: changelog libgnutls26.NEWS
ametzler at users.alioth.debian.org
ametzler at users.alioth.debian.org
Sat Jun 19 13:07:08 UTC 2010
Author: ametzler
Date: Sat Jun 19 13:07:05 2010
New Revision: 872
URL: http://svn.debian.org/wsvn/pkg-gnutls/?sc=1&rev=872
Log:
[lintian] reformat NEWS entry.
Modified:
packages/gnutls26/branches/branch2.9.x/debian/changelog
packages/gnutls26/branches/branch2.9.x/debian/libgnutls26.NEWS
Modified: packages/gnutls26/branches/branch2.9.x/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-gnutls/packages/gnutls26/branches/branch2.9.x/debian/changelog?rev=872&op=diff
==============================================================================
--- packages/gnutls26/branches/branch2.9.x/debian/changelog (original)
+++ packages/gnutls26/branches/branch2.9.x/debian/changelog Sat Jun 19 13:07:05 2010
@@ -1,13 +1,12 @@
-gnutls26 (2.9.12-2) UNRELEASED; urgency=low
-
- * NOT RELEASED YET
+gnutls26 (2.9.12-2) experimental; urgency=low
+
* Work around gcc-4.4 bug <http://bugs.debian.org/519006> by building
without -g on mips/mipsel. (As a side effect this makes libgnutls26-dbg a
useless and almost empty package on these archs.)
* Drop ancient workaround for gcc bug on hppa.
http://bugs.debian.org/128036
- -- Andreas Metzler <ametzler at debian.org> Thu, 17 Jun 2010 19:35:27 +0200
+ -- Andreas Metzler <ametzler at debian.org> Sat, 19 Jun 2010 14:38:22 +0200
gnutls26 (2.9.12-1) experimental; urgency=low
Modified: packages/gnutls26/branches/branch2.9.x/debian/libgnutls26.NEWS
URL: http://svn.debian.org/wsvn/pkg-gnutls/packages/gnutls26/branches/branch2.9.x/debian/libgnutls26.NEWS?rev=872&op=diff
==============================================================================
--- packages/gnutls26/branches/branch2.9.x/debian/libgnutls26.NEWS (original)
+++ packages/gnutls26/branches/branch2.9.x/debian/libgnutls26.NEWS Sat Jun 19 13:07:05 2010
@@ -1,25 +1,25 @@
gnutls26 (2.6.6-1) unstable; urgency=high
- * libgnutls: Check expiration/activation time on untrusted certificates.
- Before the library did not check activation/expiration times on
- certificates, and was documented as not doing so. We have realized that
- many applications that use libgnutls, including gnutls-cli, fail to
- perform proper checks. Implementing similar logic in all applications
- leads to code duplication. Hence, we decided to check whether the
- current time (as reported by the time function) is within the
- activation/expiration period of certificates when verifying untrusted
- certificates.
+ libgnutls: Check expiration/activation time on untrusted certificates.
+ Before the library did not check activation/expiration times on
+ certificates, and was documented as not doing so. We have realized that
+ many applications that use libgnutls, including gnutls-cli, fail to
+ perform proper checks. Implementing similar logic in all applications
+ leads to code duplication. Hence, we decided to check whether the
+ current time (as reported by the time function) is within the
+ activation/expiration period of certificates when verifying untrusted
+ certificates.
- This changes the semantics of gnutls_x509_crt_list_verify, which in
- turn is used by gnutls_certificate_verify_peers and
- gnutls_certificate_verify_peers2. We add two new
- gnutls_certificate_status_t codes for reporting the new error
- condition, GNUTLS_CERT_NOT_ACTIVATED and GNUTLS_CERT_EXPIRED. We also
- add a new gnutls_certificate_verify_flags flag,
- GNUTLS_VERIFY_DISABLE_TIME_CHECKS, that can be used to disable the new
- behaviour.
- GNUTLS-SA-2009-3 CVE-2009-1417
- http://www.gnu.org/software/gnutls/security.html
+ This changes the semantics of gnutls_x509_crt_list_verify, which in
+ turn is used by gnutls_certificate_verify_peers and
+ gnutls_certificate_verify_peers2. We add two new
+ gnutls_certificate_status_t codes for reporting the new error
+ condition, GNUTLS_CERT_NOT_ACTIVATED and GNUTLS_CERT_EXPIRED. We also
+ add a new gnutls_certificate_verify_flags flag,
+ GNUTLS_VERIFY_DISABLE_TIME_CHECKS, that can be used to disable the new
+ behaviour.
+ GNUTLS-SA-2009-3 CVE-2009-1417
+ http://www.gnu.org/software/gnutls/security.html
-- Andreas Metzler <ametzler at debian.org> Thu, 30 Apr 2009 19:00:21 +0200
More information about the Pkg-gnutls-commits
mailing list