Format: 1.8 Date: Mon, 12 Jun 2017 09:26:39 -0400 Source: gnutls28 Binary: libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc libgnutlsxx28 libgnutls-openssl27 Architecture: i386 i386_translations Version: 3.5.6-4ubuntu4.1 Distribution: zesty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gnutls-bin - GNU TLS library - commandline utilities gnutls-doc - GNU TLS library - documentation and examples libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx28 - GNU TLS library - C++ runtime library Changes: gnutls28 (3.5.6-4ubuntu4.1) zesty-security; urgency=medium . * SECURITY UPDATE: null pointer dereference via status response TLS extension decoding - debian/patches/CVE-2017-7507-1.patch: ensure response IDs are properly deinitialized in lib/ext/status_request.c. - debian/patches/CVE-2017-7507-2.patch: remove parsing of responder IDs from client extension in lib/ext/status_request.c. - debian/patches/CVE-2017-7507-3.patch: documented requirements for parameters in lib/ext/status_request.c. - CVE-2017-7507 * SECURITY UPDATE: DoS and possible code execution via OpenPGP certificate decoding - debian/patches/CVE-2017-7869.patch: enforce packet limits in lib/opencdk/read-packet.c. - CVE-2017-7869 Checksums-Sha1: 90afcd5c1ecb9a42cfedc21fb35db08d9a3203df 304048 gnutls-bin-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb ef9d733ea7d0f5d94f2c5078d7e294353454a5cd 208016 gnutls-bin_3.5.6-4ubuntu4.1_i386.deb 2b5fe939b26b43a4cb014228835807297ec3f862 252877 gnutls28_3.5.6-4ubuntu4.1_i386_translations.tar.gz 07a9044dfe49b7d8cb1324509b363b5c649e3ac6 38724 libgnutls-openssl27-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb 32cbb97609215dd7e54e200bec1b56343b1838b8 21200 libgnutls-openssl27_3.5.6-4ubuntu4.1_i386.deb 93e64fd74cb1f5600ed0c121ae78b1e363161aba 684628 libgnutls28-dev_3.5.6-4ubuntu4.1_i386.deb f4e572c394cc54795c46b096145ad5c229e3cdee 1203384 libgnutls30-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb cbcb8597fc532466f4a1bbdbe4e7b3ed4443f833 642362 libgnutls30_3.5.6-4ubuntu4.1_i386.deb f3d62e52da1077730e1fac48a3bad360fc22c038 32864 libgnutlsxx28-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb 465c18bb225e26ed13b85b4cb0a7a750156c181b 13942 libgnutlsxx28_3.5.6-4ubuntu4.1_i386.deb Checksums-Sha256: 0f8eb55e50940be3e292fe297dd49d745a4f627958a44493f0751ed8be908417 304048 gnutls-bin-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb 58307991b2a12b73e7601aa3a54cb9ae850776da3569bb3c5c606219952e716c 208016 gnutls-bin_3.5.6-4ubuntu4.1_i386.deb 9dbdc5ba1d739c0e2a3c7f9f6797ebb75f6b8965ba6ef5ab8974ed1929258251 252877 gnutls28_3.5.6-4ubuntu4.1_i386_translations.tar.gz 464a911a3c41395e6d57ade098c8707b143f3737bf1cbb7fc9184945b45aa8d3 38724 libgnutls-openssl27-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb aede1fd99eeaf1515b0f89389e19c8871e396a6b901d51ebc17acb5aa569821d 21200 libgnutls-openssl27_3.5.6-4ubuntu4.1_i386.deb 0848607a1506fc0f7a79f122af151da1bf37a4f164a2cff837ecc2809359e58e 684628 libgnutls28-dev_3.5.6-4ubuntu4.1_i386.deb 7a1db57c13f7b287064937e77b987a1dd1ff04c9d62d1673de17a333728cbec5 1203384 libgnutls30-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb 4b92e57de47308da9c13a46c83db7d7aa035ce10764d499cb279cdc288c8f856 642362 libgnutls30_3.5.6-4ubuntu4.1_i386.deb d96c93985b75ec8fe7acec5110e54818bfb181ab6b640d651ea791f64e920fac 32864 libgnutlsxx28-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb 913970b5a7862e4c48451fe3f54dfd28d9f060cf66fb12a664e6904b9a942de1 13942 libgnutlsxx28_3.5.6-4ubuntu4.1_i386.deb Files: 78ac3d050fd82c8374f034a89cb0b22a 304048 net extra gnutls-bin-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb 07ee333f71909e7e74410eb5bc8b4106 208016 net optional gnutls-bin_3.5.6-4ubuntu4.1_i386.deb d4f35b5ef97796484ca047ff67fac0bb 252877 raw-translations - gnutls28_3.5.6-4ubuntu4.1_i386_translations.tar.gz 45ece35347c52e2b3239951f9dd431b7 38724 libs extra libgnutls-openssl27-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb 3d6ec2d6d8f71f8bd14208fde2e37857 21200 libs standard libgnutls-openssl27_3.5.6-4ubuntu4.1_i386.deb 6267bec2066edbced21fa0b42e6b5c63 684628 libdevel optional libgnutls28-dev_3.5.6-4ubuntu4.1_i386.deb 30895f27b4a23b06cdff5136a88ef06c 1203384 libs extra libgnutls30-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb 8e18f06a0b87d93ae6c12943bf3b1dd1 642362 libs standard libgnutls30_3.5.6-4ubuntu4.1_i386.deb 068b65c9afe1a9e16c638d032a764035 32864 libs extra libgnutlsxx28-dbgsym_3.5.6-4ubuntu4.1_i386.ddeb aa6385628e09767d432c0d02bb56d88d 13942 libs extra libgnutlsxx28_3.5.6-4ubuntu4.1_i386.deb Original-Maintainer: Debian GnuTLS Maintainers