-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 06 Oct 2018 14:06:18 +0200
Source: gnutls28
Binary: libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc libgnutlsxx28
libgnutls-openssl27 libgnutls-dane0
Architecture: source
Version: 3.5.8-5+deb9u4
Distribution: stretch
Urgency: medium
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-ma...@lists.alioth.debian.org>
Changed-By: Andreas Metzler <ametz...@debian.org>
Description:
gnutls-bin - GNU TLS library - commandline utilities
gnutls-doc - GNU TLS library - documentation and examples
libgnutls28-dev - GNU TLS library - development files
libgnutls30 - GNU TLS library - main runtime library
libgnutls-dane0 - GNU TLS library - DANE security support
libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
libgnutlsxx28 - GNU TLS library - C++ runtime library
Changes:
gnutls28 (3.5.8-5+deb9u4) stretch; urgency=medium
.
* Pull fixes for CVE-2018-10844 and CVE-2018-10845 from gnutls 3.5.19
+ 39_01-dummy_wait-correctly-account-the-length-field-in-SHA.patch
+ 39_02-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
+ 39_03-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
+ 39_04-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
+ 39_05-tests-pkcs12_encode-fix-test-for-SHA512.patch
Checksums-Sha1:
c4b76205d5334be929dc9063182b7b8f75a003bc 3286 gnutls28_3.5.8-5+deb9u4.dsc
1137bc261456bdf7f2ec84930a129017bb6b3fe4 111484
gnutls28_3.5.8-5+deb9u4.debian.tar.xz
Checksums-Sha256:
688284aba04d8ff84c6636d354c844c06e691031eb9a2fccc2e41547ed2fac9e 3286
gnutls28_3.5.8-5+deb9u4.dsc
9013debe7c67edcd8aff039ab250d294b61313e52f7bbbd212d68d0b4fcee187 111484
gnutls28_3.5.8-5+deb9u4.debian.tar.xz
Files:
b1163afe47bfa5923d0d73859300350c 3286 libs optional gnutls28_3.5.8-5+deb9u4.dsc
83b53f9068afcfa474127aae5baec636 111484 libs optional
gnutls28_3.5.8-5+deb9u4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAlu4ri4ACgkQpU8BhUOC
FITm+Q/8DM1vGisYR9QMzIzMFav+VH82wPNUXvWjUrZkfZkiOjF/8nFAjEIsGBWX
AJSDUZwKr99CWvPf4oBCcCuDBPHVEYElRCK3mkAZenVR3olUGqk1Ag8FYDXwth7n
r1qHTAsysGu82rH51hf9AKJ2a6jddaIMEx2HD2AT/qaE4jCBJMY8IsdmRK9Y8IFD
Ip0cVKaij3oANCdTQmfr0MYzu3mPAe5kmRWwoUQuGJYfFIREbBgM6KnDmd2Q/7cJ
0+ZNetascjXGd2KtyqQET87no0dY7qwmvOfPYw6uc/Wze47HslSJx3p02ep862XR
4jDpAqGaxk9b2MyR09m6PP2TnROHcgX6pwcDWeSbuXd2TJvOiPIvyoKG6OwFLdGG
ikOS0dqrbsQkg5oFkop4f9E6M4iAmCLXqYx+uwNk+Fx46Mkn5tjnGF4pNvsRI+ou
a8WSTFiZRK8i7DyIAqnf7AtmE5pvg5KvKbjG0e2eH1p+vugkWFnvONQ2KgEk0T9p
iyoY9PEnlrOti/wE7f4ssc6tnKd0TOmL6nGnPTbO5xxZnQiilpo3bM3vTib1ewBM
RnhUxkoYIHy8+2edD8FUY5XOnidhbeIp/OQxgOMkfY5FhjzFHpHNWtaDTB+3lcO0
jrWFn92QYL7klw0LuK4hid2+1wXc8G/Eo2KLkzbwKThJrU276WA=
=Dc0v
-----END PGP SIGNATURE-----
