Changelog for
gnutls-debuginfo-1.4.1-7.el5_8.2.i386.rpm :
Thu Mar 22 23:00:00 2012 Tomas Mraz
1.4.1-7.2
- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
- fix CVE-2012-1573 - security issue in packet parsing (#805432)
Thu Feb 9 23:00:00 2012 Tomas Mraz 1.4.1-7.1
- fix multiple possible NULL dereferences and other problems
that can potentially lead to segfault in the client
Tue Mar 9 23:00:00 2010 Tomas Mraz 1.4.1-7
- fix safe renegotiation on SSL3 protocol
Wed Mar 3 23:00:00 2010 Tomas Mraz 1.4.1-6
- implement safe renegotiation - CVE-2009-3555 (#533125)
- do not allow MD2 in certificate signatures by default - CVE-2009-2409
(#510197)
Sat Aug 15 00:00:00 2009 Tomas Mraz 1.4.1-5
- fix NUL characters in DN and SAN cert fields issue,
make sure gnutls_x509_crt_check_hostname() fails when certificate
has no CN or SAN CVE-2009-2730 (#516231)
Tue Nov 11 23:00:00 2008 Tomas Mraz 1.4.1-4
- fix chain verification issue CVE-2008-4989 (#470079)
Wed May 21 00:00:00 2008 Tomas Mraz 1.4.1-3
- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1
(#447461, #447462, #447463)
Fri Sep 15 00:00:00 2006 Tomas Mraz 1.4.1-2
- detect forged signatures - CVE-2006-4790 (#206411), patch
from upstream
Wed Jul 19 00:00:00 2006 Tomas Mraz - 1.4.1-1
- upgrade to new upstream version, only minor changes
Thu Jul 13 00:00:00 2006 Jesse Keating - 1.4.0-1.1
- rebuild
Thu Jun 15 00:00:00 2006 Tomas Mraz - 1.4.0-1
- upgrade to new upstream version (#192070), rebuild
of dependent packages required
Wed May 17 00:00:00 2006 Tomas Mraz - 1.2.10-2
- added missing buildrequires
Mon Feb 13 23:00:00 2006 Tomas Mraz - 1.2.10-1
- updated to new version (fixes CVE-2006-0645)
Fri Feb 10 23:00:00 2006 Jesse Keating - 1.2.9-3.2
- bump again for double-long bug on ppc(64)
Tue Feb 7 23:00:00 2006 Jesse Keating - 1.2.9-3.1
- rebuilt for new gcc4.1 snapshot and glibc changes
Tue Jan 3 23:00:00 2006 Jesse Keating 1.2.9-3
- rebuilt
Fri Dec 9 23:00:00 2005 Tomas Mraz 1.2.9-2
- replaced
*-config scripts with calls to pkg-config to
solve multilib conflicts
Wed Nov 23 23:00:00 2005 Tomas Mraz 1.2.9-1
- upgrade to newest upstream
- removed .la files (#172635)
Mon Aug 8 00:00:00 2005 Tomas Mraz 1.2.6-1
- upgrade to newest upstream (rebuild of dependencies necessary)
Tue Jul 5 00:00:00 2005 Tomas Mraz 1.0.25-2
- split the command line tools to utils subpackage
Sun May 1 00:00:00 2005 Tomas Mraz 1.0.25-1
- new upstream version fixes potential DOS attack
Sun Apr 24 00:00:00 2005 Tomas Mraz 1.0.24-2
- readd the version script dropped by upstream
Sat Apr 23 00:00:00 2005 Tomas Mraz 1.0.24-1
- update to the latest upstream version on the 1.0 branch
Wed Mar 2 23:00:00 2005 Warren Togami 1.0.20-6
- gcc4 rebuild
Tue Jan 4 23:00:00 2005 Ivana Varekova 1.0.20-5
- add gnutls Requires zlib-devel (#144069)
Mon Nov 8 23:00:00 2004 Colin Walters 1.0.20-4
- Make gnutls-devel Require libgcrypt-devel
Wed Sep 22 00:00:00 2004 Jeff Johnson 1.0.20-3
- rebuild with release++, otherwise unchanged.
Wed Sep 8 00:00:00 2004 Jeff Johnson 1.0.20-2
- patent tainted SRP code removed.
Mon Sep 6 00:00:00 2004 Jeff Johnson 1.0.20-1
- update to 1.0.20.
- add --with-included-opencdk --with-included-libtasn1
- add --with-included-libcfg --with-included-lzo
- add --disable-srp-authentication.
- do \"make check\" after build.
Fri Mar 21 23:00:00 2003 Jeff Johnson 0.9.2-1
- upgrade to 0.9.2
Wed Jun 26 00:00:00 2002 Jeff Johnson 0.4.4-1
- update to 0.4.4.
Sat Jun 22 00:00:00 2002 Tim Powers
- automated rebuild
Sun May 26 00:00:00 2002 Jeff Johnson 0.4.3-1
- update to 0.4.3.
Wed May 22 00:00:00 2002 Jeff Johnson 0.4.2-1
- update to 0.4.2.
- change license to LGPL.
- include splint annotations patch.
Wed Apr 3 00:00:00 2002 Nalin Dahyabhai 0.4.0-1
- update to 0.4.0
Thu Jan 17 23:00:00 2002 Nalin Dahyabhai 0.3.2-1
- update to 0.3.2
Thu Jan 10 23:00:00 2002 Nalin Dahyabhai 0.3.0-1
- add a URL
Thu Dec 20 23:00:00 2001 Nalin Dahyabhai
- initial package
