Change log for neon package in Ubuntu

neon (0.25.5.dfsg-5ubuntu0.1) dapper-security; urgency=low

  * SECURITY UPDATE: SSL certificate by-pass with NULL CN byte.
    - src/ne_{gnutls,openssl,private,session,string}.c:
      backported upstream fixes from 0.28.6 inline.
    - debian/rules: enable testsuite for build comparisons.
    - CVE-2009-2474

 -- Kees Cook <email address hidden>   Thu, 17 Sep 2009 10:23:50 -0700

Available diffs

• diff from 0.25.5.dfsg-5 (in Ubuntu) to 0.25.5.dfsg-5ubuntu0.1 (15.1 KiB)

neon (0.25.5.dfsg-6build1) feisty; urgency=low

  * Rebuild for changes in the amd64 toolchain.

 -- Matthias Klose <email address hidden>   Mon,  5 Mar 2007 01:23:10 +0000

neon (0.25.5.dfsg-6) unstable; urgency=medium

  * Update openssl dependency and Standards-Version.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  07 Nov 2006 03:06:30 +0000

neon (0.25.5.dfsg-5) unstable; urgency=medium

  * Fix library dependencies in pkg-config output (closes: #358042), thanks
    to Steve Langasek for pointers; fix neon-config as well (closes: #338303).

neon (0.25.3.dfsg-1) experimental; urgency=low


  * New upstream release.
  * Add debug package to help bughunting, thanks to Matthew Palmer
    <email address hidden> for the patch (closes: #315240).

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sat, 20 Aug 2005 15:06:49 +0200

neon (0.24.7.dfsg-3) unstable; urgency=low


  * Compile against libssl0.9.8 while 0.25.4 is blocked by Subversion.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Wed,  9 Nov 2005 23:18:21 +0000

neon (0.24.7.dfsg-2) unstable; urgency=low


  * Removed Siggy from uploader by ftpmaster request.
  * Backout #285591, as it is a tla bug, ne_sock_init() must be
    called by applications before using SSL with neon.
  * Add manpage for neon-config.

 -- Laszlo Boszormenyi (GCS) <email address hidden>  Sun, 24 Apr 2005 09:23:03 +0200

neon (0.24.7.dfsg-0.2) unstable; urgency=high


  * NMU, again for subversion's sake.
  * Build-conflict with "libkrb5-dev, heimdal-dev" so krb5-config
    isn't present during our build, and we don't grow a dependency
    on krb5/gssapi libs.  This prevents libsvn0, in turn, from
    developing the same dependencies and causing its own dependant
    packages to FTBFS. (closes: #268106)

 -- Adam Conrad <adconrad@0c3.net>  Thu, 26 Aug 2004 06:47:38 -0600

neon (0.24.7.dfsg-0.1) unstable; urgency=medium


  * NMU, for the sake of subversion's security needs.
  * New upstream version (closes: #261756)

 -- Adam Conrad <adconrad@0c3.net>  Mon,  2 Aug 2004 00:14:16 -0600