Your message dated Mon, 10 Aug 2015 18:19:32 +0000
with message-id <[email protected]>
and subject line Bug#795068: fixed in gnutls28 3.3.17-1
has caused the Debian Bug report #795068,
regarding gnutls28: double free flaw in certificate DN decoding
(GNUTLS-SA-2015-3)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
795068: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795068
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: gnutls28
Version: 3.3.8-1
Severity: important
Tags: security upstream fixed-upstream
Hi
See http://www.gnutls.org/security.html#GNUTLS-SA-2015-3 and
https://bugzilla.redhat.com/show_bug.cgi?id=1251902 .
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: gnutls28
Source-Version: 3.3.17-1
We believe that the bug you reported is fixed in the latest version of
gnutls28, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Metzler <[email protected]> (supplier of updated gnutls28 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 10 Aug 2015 19:48:11 +0200
Source: gnutls28
Binary: libgnutls28-dev libgnutls-deb0-28 libgnutls28-dbg gnutls-bin gnutls-doc
guile-gnutls libgnutlsxx28 libgnutls-openssl27
Architecture: source i386 all
Version: 3.3.17-1
Distribution: unstable
Urgency: medium
Maintainer: Debian GnuTLS Maintainers <[email protected]>
Changed-By: Andreas Metzler <[email protected]>
Description:
gnutls-bin - GNU TLS library - commandline utilities
gnutls-doc - GNU TLS library - documentation and examples
guile-gnutls - GNU TLS library - GNU Guile bindings
libgnutls-deb0-28 - GNU TLS library - main runtime library
libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
libgnutls28-dbg - GNU TLS library - debugger symbols
libgnutls28-dev - GNU TLS library - development files
libgnutlsxx28 - GNU TLS library - C++ runtime library
Closes: 795068
Changes:
gnutls28 (3.3.17-1) unstable; urgency=medium
.
* New upstream version.
+ Drop superfluous patches.
(45_As-server-don-t-try-to-send-extensions-we-didn-t-rec.patch,
46_safe-renegotiation-handle-case-where-client-didn-t-s.patch,
47_safe-renegotiation-simulate-receiving-the-extension-.patch)
+ GNUTLS_PKCS11_OBJ_FLAG_NO_STORE_PUBKEY added to gnutls_pkcs11_obj_flags,
bump dependency info for functions taking it as argument or returning it.
+ Bump dependency info on private symbols.
+ Fixes double free in DN decoding [GNUTLS-SA-2015-3]. Closes: #795068
Checksums-Sha1:
084afd1048b227434f126f0ff5735b610857b27b 2920 gnutls28_3.3.17-1.dsc
42d5b59f65e38eb2177c6ec4c3f8193f5ec927ff 6298240 gnutls28_3.3.17.orig.tar.xz
0dfc797484e7867c21f0df2190623d5718fbee8b 85480 gnutls28_3.3.17-1.debian.tar.xz
d070a90b9b795aeb72fee3757b5472b989a72852 321712 gnutls-bin_3.3.17-1_i386.deb
3372db8f79c1433734735fc61bd6b92b2a7b323f 3655418 gnutls-doc_3.3.17-1_all.deb
75435f942d915152c5448d47cfdd0c711206f730 193014 guile-gnutls_3.3.17-1_i386.deb
d280abea08a33260b30c2e9c707569a3bbd14923 736130
libgnutls-deb0-28_3.3.17-1_i386.deb
d035af908d206474abf404f8b35907116525e2e8 160500
libgnutls-openssl27_3.3.17-1_i386.deb
218615fc36843132109f8fe2cddc765e6fb042d2 2090708
libgnutls28-dbg_3.3.17-1_i386.deb
1463f408dfc3d9bb3ab79813062c720a51925c10 708910
libgnutls28-dev_3.3.17-1_i386.deb
8547d35e9acd90a6078030bdf5023eef877d0a7b 15396 libgnutlsxx28_3.3.17-1_i386.deb
Checksums-Sha256:
c76750756a549fed8657c315eeac17b584d048db2818afdec4ffe469b74319fe 2920
gnutls28_3.3.17-1.dsc
dd25e48f2f89975db5f22262b085dac725a165bf51a967a02abbf409fc856f35 6298240
gnutls28_3.3.17.orig.tar.xz
de46c8fbc2febe0e0b0c6f4a37dc72f731f69664bed02d0a9ab93d36dd83222c 85480
gnutls28_3.3.17-1.debian.tar.xz
8255d8164d86c308010395bdd94c3b2cf2e0149bdb46346b04b756312fa0cca6 321712
gnutls-bin_3.3.17-1_i386.deb
b84d829d0a96e66c1ba96c74feb2786885eb9c7bc7d723c47e4009463ae898ab 3655418
gnutls-doc_3.3.17-1_all.deb
8bc2dd4eaf8d3b371d04e6ce43e7659f0a92b2be77d6c675055144837eaaff1b 193014
guile-gnutls_3.3.17-1_i386.deb
75d0ec41823222ac49092c0e177703f36d2c192027c28c5d1176d183e1e908af 736130
libgnutls-deb0-28_3.3.17-1_i386.deb
12660b30e495569793fbc5b720d3678f25bfeae22f5b2cac7a0c34a55bb95103 160500
libgnutls-openssl27_3.3.17-1_i386.deb
92360cf14863b990eb1ea450fc42610e72bf942bc84694ec0f2517f1af3890fb 2090708
libgnutls28-dbg_3.3.17-1_i386.deb
7b2011913cb7ad1dbbbe06b014db71807238a3eb064c325bc6bbf8723d9d766b 708910
libgnutls28-dev_3.3.17-1_i386.deb
6e2c21c3222fd5629c324c13d73b270a21f8c1bc8eaf4e909179f97469e6645e 15396
libgnutlsxx28_3.3.17-1_i386.deb
Files:
a14bd04f7675ee45ed6419fa9a1768d4 2920 libs optional gnutls28_3.3.17-1.dsc
70df63105ca3f86cf5d3b56da9f5b3cd 6298240 libs optional
gnutls28_3.3.17.orig.tar.xz
125b388f9c981a3768cbd62eff1c5e7c 85480 libs optional
gnutls28_3.3.17-1.debian.tar.xz
32925de2a92fb56244c4df0866b39a4d 321712 net optional
gnutls-bin_3.3.17-1_i386.deb
e739117b377ad95b208e5237d4b9912f 3655418 doc optional
gnutls-doc_3.3.17-1_all.deb
e365909333aaefd7f6f3937d6af23966 193014 lisp optional
guile-gnutls_3.3.17-1_i386.deb
c9fab3d6cd8b9dee2bc6fb89dc862b74 736130 libs standard
libgnutls-deb0-28_3.3.17-1_i386.deb
2df51183ea67f78261b3ee8cc29e93e8 160500 libs standard
libgnutls-openssl27_3.3.17-1_i386.deb
539f8b6259bb72130ca4771566288796 2090708 debug extra
libgnutls28-dbg_3.3.17-1_i386.deb
c9d6f5ab84c47d1647360373ce176ef7 708910 libdevel optional
libgnutls28-dev_3.3.17-1_i386.deb
3db9ea6b65a76b7a847ef208b05d8a83 15396 libs extra
libgnutlsxx28_3.3.17-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=ixaM
-----END PGP SIGNATURE-----
--- End Message ---
