Change log for gnutls26 package in Debian

gnutls26 (2.12.20-8+deb7u5) wheezy-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Add 43_CVE-2015-7575.diff patch.
    CVE-2015-7575: MD5-based ServerKeyExchange signature accepted by
    default.

 -- Salvatore Bonaccorso <email address hidden>  Fri, 08 Jan 2016 19:16:10 +0100

gnutls26 (2.12.20-8+deb7u3) wheezy-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Add 40_CVE-2015-0294.diff patch.
    CVE-2015-0294: certificate algorithm consistency checking issue.
  * Add 41_CVE-2015-0282.diff patch.
    CVE-2015-0282: RSA PKCS#1 signature verification forgery
    (GNUTLS-SA-2015-1).

 -- Salvatore Bonaccorso <email address hidden>  Fri, 13 Mar 2015 22:03:27 +0100

gnutls26 (2.12.23-18) experimental; urgency=medium


  * 32_fix-gcrypt-private-api-usage.patch from gpg4win: Allow building
    against libgcrypt20. (Thanks, Werner Koch for the pointer.)
  * (Build-)depend on libgcrypt20-dev.

 -- Andreas Metzler <email address hidden>  Sat, 23 Aug 2014 16:29:56 +0200

gnutls26 (2.8.6-1+squeeze3) oldstable-security; urgency=high


  * 22_gnutls-2.8.5-cve-2014-0092.patch by Nikos Mavrogiannopoulos: Fix
    certificate validation issue. CVE-2014-0092

 -- Andreas Metzler <email address hidden>  Sat, 01 Mar 2014 08:02:14 +0100

gnutls26 (2.12.20-8+deb7u2) wheezy-security; urgency=high


  * 39_Prevent-memory-corruption.diff from upstream GIT. Fix memory corruption
    on client side caused by specially crafted ServerHello.
    GNUTLS-SA-2014-3 / CVE-2014-3466

 -- Andreas Metzler <email address hidden>  Sat, 31 May 2014 16:27:40 +0200

gnutls26 (2.12.23-17) unstable; urgency=medium


  [ Mauricio Faria de Oliveira ]
  * Add fixes for automake (30_fix_automake_oldies.patch).
  * Run dh-autoreconf on build. (Closes: #751796)

  [ Andreas Metzler ]
  * 31_linkage-gpgerror.diff: Stop unnecessary linkage against libgpg-error
    caused by buildung with up to date lib-link.m4.

 -- Andreas Metzler <email address hidden>  Thu, 03 Jul 2014 19:47:01 +0200

gnutls26 (2.12.23-16) unstable; urgency=high


  * Drop libgnutls26-dbg Conflicts with libgnutls13-dbg, libgnutls28-dbg.
    These have been unnecessary since we started using dh compat v9, where
    debugging symbols are installed to /usr/lib/debug/.build-id.
  * 29_Prevent-memory-corruption.diff from upstream GIT. Fix memory corruption
    on client side caused by specifically crafted ServerHello. 
    GNUTLS-SA-2014-3 / CVE-2014-3466

 -- Andreas Metzler <email address hidden>  Sat, 31 May 2014 16:14:29 +0200

gnutls26 (2.12.23-15) unstable; urgency=medium


  * 28_use_gnutls_global_set_time.diff: Use gnutls_global_set_time_function()
    in chainverify test to fix a testsuite failure on amd64. Closes: #746018

 -- Andreas Metzler <email address hidden>  Sun, 27 Apr 2014 20:16:13 +0200

gnutls26 (2.12.20-8+deb7u1) wheezy-security; urgency=high


  * 38_CVE-2014-0092.diff by Nikos Mavrogiannopoulos: Fix certificate
    validation issue. CVE-2014-0092

 -- Andreas Metzler <email address hidden>  Sat, 01 Mar 2014 07:44:51 +0100

gnutls26 (2.12.23-14) unstable; urgency=medium


  * Move OpenSSL wrappper over to gnutls28. Stop providing
    libgnutls-openssl-dev and building libgnutls-openssl27.

 -- Andreas Metzler <email address hidden>  Wed, 16 Apr 2014 19:23:02 +0200

gnutls26 (2.12.23-13) unstable; urgency=high


  * 27_CVE-2014-0092.diff by Nikos Mavrogiannopoulos: Fix certificate
    validation issue. CVE-2014-0092

 -- Andreas Metzler <email address hidden>  Sat, 01 Mar 2014 08:30:13 +0100

gnutls26 (2.12.23-12) unstable; urgency=high


  * 26_fix_rejection-of-v1-intermedi.diff pulled and unfuzzed from GIT 3.x:
    A version 1 intermediate certificate will be considered as a CA
    certificate by default (something that deviates from the documented
    behavior).
    CVE-2014-1959 / GNUTLS-SA-2014-1

 -- Andreas Metzler <email address hidden>  Sat, 15 Feb 2014 16:37:36 +0100

gnutls26 (2.12.23-11) unstable; urgency=medium


  * (Build-)Depend on libtasn1-6-dev instead of on transitional libtasn1-3-dev
    package.

 -- Andreas Metzler <email address hidden>  Sat, 08 Feb 2014 15:29:24 +0100

gnutls26 (2.12.23-10) unstable; urgency=medium


  * Point vcs* to git.
  * Fix build on or1k (OpenRISC), thanks to Christian Svensson.
    Closes: #736750
    + Drop (build-)depends on libp11-kit-dev on or1k which is lacking libffi
      currently.
    + Do not use chrpath if we are cross compiling.

 -- Andreas Metzler <email address hidden>  Mon, 27 Jan 2014 13:37:21 +0100

gnutls26 (2.12.23-8) unstable; urgency=low


  * Let libgnutls-dev provide libgnutls-openssl-dev to prepare a seamless
    transition to gnutls28.

 -- Andreas Metzler <email address hidden>  Sun, 06 Oct 2013 13:49:36 +0200

gnutls26 (2.12.23-7) unstable; urgency=medium


  * Upload to unstable, built against libtasn1-3.
  * 25_updatedgdocfrommaster.diff - Update gdoc script from gnutls master to
    fix spurious build failure with perl 5.18. Closes: #724167

 -- Andreas Metzler <email address hidden>  Wed, 25 Sep 2013 19:25:23 +0200

gnutls26 (2.12.23-6) experimental; urgency=low


  * Upload to experimental.
  * Let's try libtasn1-6 again, gcr in unstable should now be able to handle
    it.
  * Use debhelper v9, make libgnutls26-dbg Multi-arch: same.
  * Fix vcs-field-not-canonical lintian error by using anonscm instead of
    svn.debian.org.
  * Delete rpath in gnutls-binaries shipped in libgnutls26-dbg.

 -- Andreas Metzler <email address hidden>  Sat, 29 Jun 2013 13:29:55 +0200

gnutls26 (2.12.20-7) wheezy-security; urgency=high


  * [36_sanitycheck.diff] from upstream GIT. - Fix out of bounds data access.
    Closes: #709301

 -- Andreas Metzler <email address hidden>  Fri, 24 May 2013 19:54:10 +0200

gnutls26 (2.12.23-5) unstable; urgency=high


  * [21_sanitycheck.diff] Fix out of bounds data access.
    Closes: #709301

 -- Andreas Metzler <email address hidden>  Thu, 23 May 2013 19:04:28 +0200

gnutls26 (2.12.23-4) unstable; urgency=low


  * Build against libtasn1-3 again.

 -- Andreas Metzler <email address hidden>  Sat, 18 May 2013 17:44:46 +0200

gnutls26 (2.12.23-3) unstable; urgency=low


  * Upload to unstable, 2.12.20 FTBFS with libc 2.17 due to removal of gets.
  * Import 2.12.20-* changelog entries.

 -- Andreas Metzler <email address hidden>  Thu, 09 May 2013 13:50:33 +0200

gnutls26 (2.12.23-2) experimental; urgency=low


  * Build against libtasn1-6.

 -- Andreas Metzler <email address hidden>  Mon, 06 May 2013 18:47:37 +0200

gnutls26 (2.12.20-6) unstable; urgency=low


  * For wheezy build gnutls-bin and guile-gnutls from this source package 
    rather than from gnutls28. gnutls28 is a leaf-package in wheezy. Not
    shipping would mean a lot less work for the security team if there was a
    GnuTLS vulnerability. If wanted, it can be re-introduced via backports.
    The versioning trick has been copied from Ubuntu.
  * Since guile support would require building with --disable-largefile on
    armel armhf mipsel we do not provide the package there.

 -- Andreas Metzler <email address hidden>  Thu, 04 Apr 2013 18:34:25 +0200

gnutls26 (2.12.20-5) unstable; urgency=low


  * Testbuild gnutls guile bindings, binary packages unchanged.

 -- Andreas Metzler <email address hidden>  Fri, 22 Mar 2013 18:58:28 +0100

gnutls26 (2.12.23-1) experimental; urgency=low


  * New upstream version.
    + Includes fix for lucky thirteen TLS CBC padding timing
      attack. CVE-2013-0169 CVE-2013-1619 GNUTLS-SA-2013-1

 -- Andreas Metzler <email address hidden>  Wed, 06 Feb 2013 14:11:02 +0100

gnutls26 (2.12.20-4) unstable; urgency=high


  * Pull fixes from 2.12.23:
    + 34_pkcs11_memleak.diff Eliminated memory leak in PCKS #11
      initialization.
    + 35_TLS-CBC_timing-attack.diff (GNUTLS-SA-2013-1) TLS CBC padding timing
      attack

 -- Andreas Metzler <email address hidden>  Mon, 04 Feb 2013 19:35:29 +0100

gnutls26 (2.12.22-1) experimental; urgency=low


  * Update watchfile, based on Bart Martens version from q.d.o, but use a)
    ftp.gnutls.org as mirror and b) limit the the match to 2.x versions.
  * New upstream version.
    + Drop 30_strlen_on_null.diff.

 -- Andreas Metzler <email address hidden>  Sun, 06 Jan 2013 09:27:43 +0100

gnutls26 (2.12.20-3) unstable; urgency=low


  * Pull fixes from 2.12.22:
    +31_allow_key_usage_violation.diff: Always tolerate key usage violation
     errors from the side of the peer, but also notify via an audit message.
    +32_record-padding-parsing.patch: Fix record padding parsing issue.
    +33_stricter_rsa_pkcs_1.5.diff: Fixes random handshake failures with
     non-GnuTLS implementations.
    This brings us up to GnuTLS 2.12.22, except for these differences:
    - The equivalent change of 33_stricter_rsa_pkcs_1.5.diff for the nettle
      code is not included as it is not relevant for Debian's binary packages.
    - 0b9d8d6f21dad85038c6de36d8fbd56271263f64 Corrected bug in PGP subpacket
      encoding.
    - Compatibility with libtasn1 3.x, which would require libtasn1 >=2.14.
    - Updated gnulib.
  * Update watchfile, based on Bart Martens version from q.d.o, but use a)
    ftp.gnutls.org as mirror and b) limit the the match to 2.x versions.

 -- Andreas Metzler <email address hidden>  Sun, 06 Jan 2013 10:56:57 +0100

gnutls26 (2.12.21-4) experimental; urgency=low


  * 30_strlen_on_null.diff: Pulled from upstream git. Fix segfault caused
    by running strlen() on NULL. Closes: #647747

 -- Andreas Metzler <email address hidden>  Sun, 18 Nov 2012 14:48:57 +0100

gnutls26 (2.12.20-2) unstable; urgency=low


  * 30_strlen_on_null.diff: Fix segfault caused by running strlen() on NULL.
    Closes: #647747
  * Fix documentation packaging. gnutls-doc is built from the GnuTLS 3.x
    packages. Add a new gnutls26-doc package which drops manpages and info
    format documentation in favour of being co-installable with
    gnutls-doc.

 -- Andreas Metzler <email address hidden>  Tue, 13 Nov 2012 19:21:25 +0100

gnutls26 (2.12.21-3) experimental; urgency=low


  * Build with -sa.

 -- Andreas Metzler <email address hidden>  Sun, 11 Nov 2012 09:50:41 +0100

gnutls26 (2.12.20-1) unstable; urgency=low


  * New upstream release.
  * Drop 25_nssldapsfix.diff (already included).

 -- Andreas Metzler <email address hidden>  Sun, 10 Jun 2012 16:53:50 +0200

gnutls26 (2.12.19-2) unstable; urgency=low


  * Pull debian/patches/25_nssldapsfix.diff from upstream git.
    (LP: #1003841)

 -- Andreas Metzler <email address hidden>  Thu, 07 Jun 2012 19:17:07 +0200

gnutls26 (2.8.6-1+squeeze2) stable-security; urgency=high


  * Apply patch to fix crashes in record parsing (CVE-2012-1573)

 -- Florian Weimer <email address hidden>  Sun, 25 Mar 2012 13:37:15 +0200

gnutls26 (2.12.19-1) unstable; urgency=low


  * New upstream release.

 -- Andreas Metzler <email address hidden>  Sat, 05 May 2012 20:02:34 +0200

gnutls26 (2.12.18-1) unstable; urgency=low


  * New upstream release.

 -- Andreas Metzler <email address hidden>  Fri, 16 Mar 2012 19:34:18 +0100

gnutls26 (2.12.17-2) unstable; urgency=low


  * Upload to unstable.

 -- Andreas Metzler <email address hidden>  Sat, 10 Mar 2012 16:07:43 +0100

gnutls26 (2.12.17-1) experimental; urgency=low


  * New upstream release.
   + Unfuzz 20_tests-select.diff.
   + Bump libp11-kit-dev build-dep.
   + Bump shlibs.

 -- Andreas Metzler <email address hidden>  Sat, 03 Mar 2012 18:17:30 +0100

gnutls26 (2.8.6-1+squeeze1) stable; urgency=low


  * Pull fixes for buffer overflow in gnutls_session_get_data() from upstream
    git. (CVE-2011-4128: GNUTLS-SA-2011-2) Closes: #648441
    20_CVE-2011-4128.part1.diff 20_CVE-2011-4128.part2.diff

 -- Andreas Metzler <email address hidden>  Thu, 22 Dec 2011 18:07:26 +0100

gnutls26 (2.12.16-1) unstable; urgency=low


  * New upstream release.

 -- Andreas Metzler <email address hidden>  Sat, 07 Jan 2012 13:20:09 +0100

gnutls26 (2.12.14-5) unstable; urgency=low


  * Disable gnutls-guile package, let it be provided by gnutls28.

 -- Andreas Metzler <email address hidden>  Sat, 17 Dec 2011 12:05:34 +0100

gnutls26 (2.12.14-4) unstable; urgency=low


  * Prepare for uploading gnutls28 to unstable.
    + Drop gnutls-bin package, it is going to be provided by gnutls28.
    + Binaries are still useful for debugging, ship them with libgnutls-dbg
      in LIBDIR/libgnutls26.

 -- Andreas Metzler <email address hidden>  Sat, 03 Dec 2011 09:39:54 +0100

gnutls26 (2.12.14-3) unstable; urgency=low


  * [20_tests-select.diff] Do not run gnulib test-select test anymore. The
    test fails on kfreebsd-i386, the gnutls library does not use select().
    Closes: #648247

 -- Andreas Metzler <email address hidden>  Tue, 15 Nov 2011 19:10:06 +0100

Available diffs

• diff from 2.12.11-1 (in ~ubuntu-toolchain-r/ubuntu/ppa) to 2.12.14-3 (689.3 KiB)

gnutls26 (2.12.14-2) unstable; urgency=low


  * Build gnutls with --disable-largefile on armel, armhf and mipsel to fix
    FTBFS on these architectures.
    See http://lists.gnu.org/archive/html/gnutls-devel/2011-10/msg00075.html

 -- Andreas Metzler <email address hidden>  Sat, 12 Nov 2011 09:30:42 +0100

gnutls26 (2.12.14-1) unstable; urgency=medium


  * Simplify dependencies:
    + libgnutls-dev Provides/Conflicts/Replaces gnutls-dev (which is
      also provided by gnutls28' libgnutls*-dev).
    + Drop *ancient* Conflicts/Replaces against libgnutls5-dev, gnutls0.4-dev,
      gnutls-dev (<< 0.4.0-0), libgnutls11-dev.
  * New upstream bugfix release.

 -- Andreas Metzler <email address hidden>  Tue, 08 Nov 2011 19:34:28 +0100

gnutls26 (2.12.12-1) unstable; urgency=low


  * New upstream version.
  * Drop -mlong-double-64 on powerpc, updated gnulib should fix this issue and
    the build-failure on powerpc64. Closes: #644944
  * Delete superfluous info from debian/README.source.
  * Drop 20_guiledocstring, included upstream.

 -- Andreas Metzler <email address hidden>  Fri, 21 Oct 2011 19:33:04 +0200

gnutls26 (2.12.11-1) unstable; urgency=low


  * New upstream version.
    + Allow CA importing of 0 certificates to succeed. Closes: #640639
  * Add libp11-kit-dev to libgnutls-dev dependencies. (see #643811)
  * [20_guiledocstring.diff] guile: Fix docstring extraction with CPP 4.5+.

 -- Andreas Metzler <email address hidden>  Sat, 01 Oct 2011 15:28:13 +0200

gnutls26 (2.12.10-2) unstable; urgency=low


  * Add -mlong-double-64 to CFLAGS on powerpc to work around gnulib testsuite
    error (test-float). See http://savannah.gnu.org/bugs/?33710 and 
    http://mid.gmane.org/relbj8-8jh.ln1%40argenau.downhill.at.eu.org

 -- Andreas Metzler <email address hidden>  Sun, 11 Sep 2011 08:23:54 +0200

gnutls26 (2.12.10-1) unstable; urgency=low


  * New upstream version.
    + Uses p11-kit instead of forked pakchois for PKCS#11. Update
      build-depends (libp11-kit-dev and pkg-config) and debian/copyright.
  * Drop superfluous patches (20_gcrypt15compat.diff,
    21_gnutls-cli.man.diff 22_export_gnutls_openpgp_privkey_sign_hash.diff
    23_deinit_privkey.diff 24_XmppAddr-UTF8String.diff).
  * Fix binary-control-field-duplicates-source lintian warnings.

 -- Andreas Metzler <email address hidden>  Sat, 03 Sep 2011 14:40:36 +0200

gnutls26 (2.12.7-8) unstable; urgency=high


  * Since libgnutls*-dbg contains debugging symbols of helper applications
    libgnutls26-dbg and libgnutls28-dbg are not co-installable. Add Conflicts.
  * [24_XmppAddr-UTF8String.diff] Correct parsing of XMPP subject
    alternative names. Closes: #638586
  * [23_deinit_privkey.diff] gnutls_certificate_set_x509_key() and
    gnutls_certificate_set_openpgp_key() operate as in 2.10.x and allow the
    release of the private key during the lifetime of the certificate
    structure. Closes: #638595
  * Upload with urgency=high, 638595 breaks wwwoffle's TLS support.

 -- Andreas Metzler <email address hidden>  Sun, 28 Aug 2011 08:54:26 +0200

gnutls26 (2.12.7-7) unstable; urgency=high


  * 21_gnutls-cli.man.diff pulled from upstream git: Formatting fix for
    gnutls-cli manpage. Closes: #637551
  * 22_export_gnutls_openpgp_privkey_sign_hash.diff. Fix ABI breakage,
    export_gnutls_openpgp_privkey_sign_hash() used to be present in 2.10.x was
    accidentally dropped from the symbol list. (Thanks, Jakub Wilk)
    Closes: #638801

 -- Andreas Metzler <email address hidden>  Mon, 22 Aug 2011 19:24:08 +0200

gnutls26 (2.12.7-6) unstable; urgency=low


  * Use common-install-arch instead of common-install-prehook-arch to delete
    rpath.

 -- Andreas Metzler <email address hidden>  Fri, 12 Aug 2011 20:26:22 +0200

gnutls26 (2.12.7-4) unstable; urgency=low


  * Upload to unstable.
  * Point watch file to stable release directory.
  * 18_gpgerrorinpkgconfig.diff: Add libgpg-error to pkg-config
    Libs.private. Closes: #632891
  * Update libgnutls26 Breaks (snowdrop and zoneminder versions.)

 -- Andreas Metzler <email address hidden>  Sun, 07 Aug 2011 09:58:28 +0200

gnutls26 (2.12.7-3) experimental; urgency=low
  [ Simon Josefsson ]  * Fix Debian BTS URL in --with-packager-bug-reports option.  [ Andreas Metzler ]  * [20_gcrypt15compat.diff] Fix compatibility with gcrypt 1.5. -- Andreas Metzler <email address hidden>  Mon, 25 Jul 2011 19:59:36 +0200

gnutls26 (2.10.5-3) unstable; urgency=medium
  * [20_gcrypt15compat.diff] Fix compatibility with gcrypt 1.5. -- Andreas Metzler <email address hidden>  Mon, 25 Jul 2011 19:26:34 +0200

gnutls26 (2.12.7-2) experimental; urgency=low
  * Stop shipping libtool la files.  * Convert to multi-arch. (Partial merge from Ubuntu 2.10.5-1ubuntu2):    + configure with --libdir=\$${prefix}/lib/$(DEB_HOST_MULTIARCH), update      *.install accordingly.    + Bump cdbs Build-Depends to 0.4.93 (required for expanding      $(DEB_HOST_MULTIARCH)).    + Bump debhelper b-d to 8.1.3 (for ${misc:Pre-Depends}).    + runtime libraries and guile-wrapper are Multi-Arch: same with       Pre-Depends: ${misc:Pre-Depends}, -bin (helper binaries) and -doc are       Multi-Arch: foreign, -dev and -dbg remain unchanged.    + Diverge from Ubuntu patch  by not settting Multi-Arch: same on -dbg      package. It contains debugging symbols for both library and helper      binaries ( e.g. /usr/lib/debug/usr/bin/gnutls-cli) and is therefore not      co-installable with itself. -- Andreas Metzler <email address hidden>  Sun, 26 Jun 2011 15:01:58 +0200

gnutls26 (2.10.5-2) unstable; urgency=low
  * Stop shipping libtool la files. -- Andreas Metzler <email address hidden>  Sat, 25 Jun 2011 18:13:38 +0200

gnutls26 (2.12.7-1) experimental; urgency=low
  * New upstream version.  * Update 17_ignoretestsuitteerrors.diff.  * A new version of pokerth has been uploaded to sid, update libgnutls26    Breaks accordingly. -- Andreas Metzler <email address hidden>  Sun, 19 Jun 2011 08:49:01 +0200

gnutls26 (2.12.6.1-1) experimental; urgency=low
  * New upstream version.  * Bump shlibs, global_set_time_function() was added.  * Stop setting CFLAGS += -Wall, it is set by default again.  * [17_ignoretestsuitteerrors.diff] Ignore two (not serious) testsuite    errors. -- Andreas Metzler <email address hidden>  Sun, 05 Jun 2011 13:18:50 +0200

gnutls26 (2.12.5-1) experimental; urgency=low
  * New upstream version.  * Bump shlibs, gnutls_x509_crq_verify() was added. -- Andreas Metzler <email address hidden>  Sat, 14 May 2011 13:21:12 +0200

gnutls26 (2.12.4-1) experimental; urgency=low
  * New upstream version.  * Bump shlibs. (gnutls_certificate_get_issuer() added). -- Andreas Metzler <email address hidden>  Sun, 08 May 2011 15:19:18 +0200

gnutls26 (2.12.3-1) experimental; urgency=low
  * New upstream version.  * Drop patches included upstream: [18_restoreHMAC-MD5.diff] -- Andreas Metzler <email address hidden>  Fri, 22 Apr 2011 18:26:11 +0200

gnutls26 (2.12.2-2) experimental; urgency=low
  * [18_restoreHMAC-MD5.diff], pulled from upstream git, restore HMAC-MD5    for compatibility. Closes: #623001 -- Andreas Metzler <email address hidden>  Sun, 17 Apr 2011 15:44:30 +0200

gnutls26 (2.12.2-1) experimental; urgency=low
  * New upstream version.  * [lintian] Drop article from short package descriptions. -- Andreas Metzler <email address hidden>  Fri, 08 Apr 2011 19:36:27 +0200

gnutls26 (2.12.1-1) experimental; urgency=low
  * New upstream version.    + certtool: Generated certificate request with stricter permissions.      Closes: #619746  * Drop superfluous patches:    17_sizeof_gnutls_openpgp_keyid_t.diff 18_ext_mod_iadef.diff    19_uninitializedvar.diff 20_access_freedmemory.diff  * Add Breaks for all packages using the GnuTLS OpenSSL wrapper. They will    need a binNMU when gnutls 2.12.x uploaded to unstable. -- Andreas Metzler <email address hidden>  Sat, 02 Apr 2011 15:22:46 +0200

gnutls26 (2.12.0-1) experimental; urgency=low
  * New upstream stable release.    + Drop superceded patches 17_goldhotfix.patch      18_libgnutls-openssl_soname.diff.  * Pull a couple of post release fixes from upstream gnutls_2_12_x branch:    17_sizeof_gnutls_openpgp_keyid_t.diff 18_ext_mod_iadef.diff    19_uninitializedvar.diff 20_access_freedmemory.diff -- Andreas Metzler <email address hidden>  Sun, 27 Mar 2011 10:23:11 +0200

gnutls26 (2.11.7-2) experimental; urgency=low
  * 18_libgnutls-openssl_soname.diff. Bump libgnutls-openssl soname (libtool    versioning: 27:0:0).  * Split off libgnutls-openssl to a separate package, since the sonames are    not in sync anymore. -- Andreas Metzler <email address hidden>  Fri, 11 Mar 2011 17:48:47 +0100

gnutls26 (2.11.7-1) experimental; urgency=low
  * New upstream version (rc for 2.12)    + Drop superfluous patches (15_fixgnutlspc.diff 17_endian.diff)    + Bump shlibs.  * debian/patches/17_goldhotfix.patch Link gnutls-extra gainst gcrypt. -- Andreas Metzler <email address hidden>  Thu, 10 Mar 2011 12:12:01 +0100

gnutls26 (2.10.5-1) unstable; urgency=low
  * New upstream bugfix release.    + Drop 15_fixgnutlspc.diff, included upstream.  * Set C(XX)FLAGS += -Wall, the latest combination of cdbs + dpkg-dev does not    seem to set it by default. -- Andreas Metzler <email address hidden>  Mon, 28 Feb 2011 18:52:57 +0100

gnutls26 (2.11.6-2) experimental; urgency=low
  * 17_endian.diff - Pulled from upstream. Fix testsuite error (./tests/resume)    on big endian architectures. -- Andreas Metzler <email address hidden>  Wed, 23 Feb 2011 19:20:40 +0100

gnutls26 (2.11.6-1) experimental; urgency=low
  * Development release.  * Continue building against libgcrypt, run configure with --with-libgcrypt.  * Refresh patches/15_fixgnutlspc.diff.  * Set --with-packager* options.  * Install newly available p11tool binary.  * Bump libgcrypt11-dev Build-Depends.  * C++ wrapper soname bump, change package name accordingly.  * Bump shlibs.  * Update debian/copyright.  * Set CFLAGS += -Wall, the latest combination of cdbs + dpkg-dev does not    seem to set it by default. -- Andreas Metzler <email address hidden>  Sat, 19 Feb 2011 15:29:43 +0100

gnutls26 (2.10.4-2) unstable; urgency=low
  * Use debhelper compatibility level 7.  * Merge in changes from 2.8.6-1:    + Use dh_lintian.    + Use dh_makeshlibs for the guile stuff, too. This gets us       a) ldconfig in postinst. Closes: #553109      and      b) a shlibs file.      However the shared objects /usr/lib/libguile-gnutls*so* are still not      designed to be used as libraries (linking) but are dlopened. guile-1.10      will address this issue by keeping this stuff in a private directory.    + hotfix pkg-config files (proper fix to be included upstream).    + Stop unneeeded linkage against libgpg-error. 16_unnecessarydep.diff      Closes: #405239   * Upload to unstable. -- Andreas Metzler <email address hidden>  Sun, 06 Feb 2011 16:44:09 +0100

gnutls26 (2.10.4-1) experimental; urgency=low
  * New upstream release. V1 CAs are trusted by default. -- Andreas Metzler <email address hidden>  Mon, 06 Dec 2010 19:13:48 +0100

gnutls26 (2.10.3-1) experimental; urgency=low


  * Drop workaround for 519006, binutils is fixed even in squeeze.
  * New upstream bugfix release.

 -- Andreas Metzler <email address hidden>  Fri, 19 Nov 2010 19:19:26 +0100

gnutls26 (2.10.2-1) experimental; urgency=low


  * New upstream version.
    + Fix asynchronous API handling. Closes: #588187
    + certtool does not crash on reading from /dev/null anymore.
      Closes: #588029
  * Standards-Version 3.9.1 -Stop building with -D_REENTRANT.

 -- Andreas Metzler <email address hidden>  Thu, 30 Sep 2010 19:10:31 +0200