Andreas, thank you for handling this so quickly! -- Guido On Thu, Nov 17, 2016 at 07:06:06PM +0000, Debian Bug Tracking System wrote: > This is an automatic notification regarding your Bug report > which was filed against the libgnutls30 package: > > #844539: Please revert DN related behaviour change introduced in 3.5.6 > > It has been closed by Andreas Metzler <ametz...@debian.org>. > > Their explanation is attached below along with your original report. > If this explanation is unsatisfactory and you have not received a > better one in a separate message then please contact Andreas Metzler > <ametz...@debian.org> by > replying to this email. > > > -- > 844539: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844539 > Debian Bug Tracking System > Contact ow...@bugs.debian.org with problems
> From: Andreas Metzler <ametz...@debian.org> > To: 844539-cl...@bugs.debian.org > Date: Thu, 17 Nov 2016 19:03:47 +0000 > Subject: Bug#844539: fixed in gnutls28 3.5.6-6 > X-Spam-Level: > X-Spam-Status: No, score=-15.8 required=4.0 tests=BAYES_00,DIGITS_LETTERS, > FOURLA,FROMDEVELOPER,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MURPHY_DRUGS_REL8, > PGPSIGNATURE,RP_MATCHES_RCVD autolearn=ham autolearn_force=no > version=3.4.0-bugs.debian.org_2005_01_02 > Message-Id: <e1c7ryn-0004g6...@fasolo.debian.org> > > Source: gnutls28 > Source-Version: 3.5.6-6 > > We believe that the bug you reported is fixed in the latest version of > gnutls28, which is due to be installed in the Debian FTP archive. > > A summary of the changes between this version and the previous one is > attached. > > Thank you for reporting the bug, which will now be closed. If you > have further comments please address them to 844...@bugs.debian.org, > and the maintainer will reopen the bug report if appropriate. > > Debian distribution maintenance software > pp. > Andreas Metzler <ametz...@debian.org> (supplier of updated gnutls28 package) > > (This message was generated automatically at their request; if you > believe that there is a problem with it please contact the archive > administrators by mailing ftpmas...@ftp-master.debian.org) > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > Format: 1.8 > Date: Thu, 17 Nov 2016 19:15:20 +0100 > Source: gnutls28 > Binary: libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc libgnutlsxx28 > libgnutls-openssl27 libgnutls-dane0 > Architecture: source > Version: 3.5.6-6 > Distribution: experimental > Urgency: medium > Maintainer: Debian GnuTLS Maintainers > <pkg-gnutls-ma...@lists.alioth.debian.org> > Changed-By: Andreas Metzler <ametz...@debian.org> > Closes: 844539 > Description: > gnutls-bin - GNU TLS library - commandline utilities > gnutls-doc - GNU TLS library - documentation and examples > libgnutls28-dev - GNU TLS library - development files > libgnutls30 - GNU TLS library - main runtime library > libgnutls-dane0 - GNU TLS library - DANE security support > libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper > libgnutlsxx28 - GNU TLS library - C++ runtime library > Changes: > gnutls28 (3.5.6-6) experimental; urgency=medium > . > * Pull a patch set from upstream GIT which reverts the DN sorting change in > 3.5.6 and adds new functions to provide a RFC4514 compliant sorting. > Closes: #844539 > 41_01_Introduced-new-functions-to-allow-multiple-DN-parsin.patch > 41_02__gnutls_x509_get_dn-when-no-data-ensure-we-return-GN.patch > 41_03_certtool-use-the-new-APIs-for-DN-extraction.patch > 41_04_cleanups-in-_gnutls_buffer_to_datum.patch > 41_05_x509-output-use-the-new-functions-for-DN-output.patch > 41_07_tests-account-for-the-strict-RFC4514-compliance-reve.patch > 41_08_pkcs7-output-use-the-new-functions-for-DN-output.patch > * Update symbol file. > Checksums-Sha1: > d0afc63ce6dd61d3b762b3148f2d6ce7b5dcf930 3226 gnutls28_3.5.6-6.dsc > b16ff3fc685eb20a426b34e2bbdbe2481fe3fcb7 115120 > gnutls28_3.5.6-6.debian.tar.xz > Checksums-Sha256: > 4ee6c67c0a53b6efd74a02e3f0019df3e75c0edddb2fcefd69acc9c57f978a5d 3226 > gnutls28_3.5.6-6.dsc > 82fde261dc430f9ed4451bbd052eb50a10bc5cd1808af0dbe764ec12da0d2b15 115120 > gnutls28_3.5.6-6.debian.tar.xz > Files: > 1c269631e63b0b36aca8df412994f62e 3226 libs optional gnutls28_3.5.6-6.dsc > 56aaf848adf6251263990909c3b8286e 115120 libs optional > gnutls28_3.5.6-6.debian.tar.xz > > -----BEGIN PGP SIGNATURE----- > > iQIcBAEBCgAGBQJYLftfAAoJEKVPAYVDghSEHiIP/3qab8DuVCAute3QwOKOy53y > l+UZrF8LHzx3/vABQKQYHHs9rBubY4mn4r2/fGZcpNQWKsjmnVg1hgFcqrBZH/Wo > VWeUOKiYUeT1UQ1PKkrEhylCwegrdohMQPETA68LTXup7SPaByqMl1oenJI9N0N5 > uUa9/kzUIjX+nGOVFlcEF6cWuxTyeGvbd+sf1WIoT4TCqhqTgzsfzOi6M2SUqXQL > DCGYkJmfAxHCO7rrpqY//A8aEKMktxdiHkchFzrWDFyClqiQNONDubnMAEh03ySD > 7WjQ7m5WwSMYKjMthutGl40+cnNWvjVWUZ3VpMkSoMAjx5bHfIKd5gVgDKSsOmw+ > k0JWvPYLJra+I1DSLYbi/axmSFbYomnAcK/DWE5Z/TM0zHXV8ZjPiuWCFOthBN7p > GhKQkX1WDTrnRkSiUWenU8I3n0l7D+VUXRuMVrNURGiBuRq6ndawgv9StAUWpRSA > dcfFD+UjD7gMRDG84LyVSVg3BDacjz0LgVJWrTT6x292PNvcrPYDq20xrOoXN7oB > qx8jIsgqWdU9Htv2EG/PF6hjxGftf7btQIuGezjxbVsuxoD8HvAzGwGqpXhlgS/c > 9T/00ceLqnAv2CrqiDnDoESa15VNIRVvGA/ezHe8fna9vzDbY40EJKsQuAExyrUJ > 1tFoFPnjpAzy+41Gs5XL > =qrXu > -----END PGP SIGNATURE----- > From: Guido Günther <a...@sigxcpu.org> > To: Debian Bug Tracking System <sub...@bugs.debian.org> > Date: Wed, 16 Nov 2016 18:54:41 +0100 > Subject: Please revert DN related behaviour change introduced in 3.5.6 > X-Spam-Level: > X-Spam-Status: No, score=-11.3 required=4.0 > tests=BAYES_00,FOURLA,HAS_PACKAGE, RP_MATCHES_RCVD,URIBL_CNKR > autolearn=ham autolearn_force=no version=3.4.0-bugs.debian.org_2005_01_02 > Message-ID: <20161116175441.e2d3zqfdh2bp7...@bogon.m.sigxcpu.org> > > Package: libgnutls30 > Version: 3.5.6-4 > Severity: normal > > Hi, > 3.5.6 introuced a behaviour change that breaks libvirt. See > > https://lists.gnupg.org/pipermail/gnutls-devel/2016-November/008224.html > > and look for "FAIL: virnettlssessiontest". > > The upstream discussion is here: > > https://lists.gnupg.org/pipermail/gnutls-devel/2016-November/008224.html > > and it seems this will be reverted. Please revert that change in Debian > too so it unbreaks libvirt. > Cheers and thanks for maintaining gnutls in Debian, > -- Guido > > > -- System Information: > Debian Release: stretch/sid > APT prefers testing > APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'unstable'), > (500, 'stable'), (1, 'experimental') > Architecture: amd64 (x86_64) > Foreign Architectures: i386 > > Kernel: Linux 4.7.0-1-amd64 (SMP w/4 CPU cores) > Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > Init: systemd (via /run/systemd/system) > > Versions of packages libgnutls30 depends on: > ii libc6 2.24-5 > ii libgmp10 2:6.1.1+dfsg-1 > ii libhogweed4 3.3-1 > ii libidn11 1.33-1 > ii libnettle6 3.3-1 > ii libp11-kit0 0.23.2-5 > ii libtasn1-6 4.9-4 > ii zlib1g 1:1.2.8.dfsg-2+b3 > > libgnutls30 recommends no packages. > > Versions of packages libgnutls30 suggests: > ii gnutls-bin 3.5.5-6 > > -- no debconf information