Change log for polarssl package in Ubuntu

polarssl (1.3.9-2.1+deb8u1build0.15.10.1) wily-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 1.3.9-2.1 (in Debian) to 1.3.9-2.1+deb8u1build0.15.10.1 (4.0 KiB)

polarssl (1.3.9-2.1) unstable; urgency=high


  * Non-maintainer upload.
  * Add CVE-2015-1182.patch patch.
    CVE-2015-1182: Denial of service and possible remote code execution
    using crafted certificates. (Closes: #775776)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 21 Jan 2015 22:09:05 +0100

Available diffs

• diff from 1.3.9-2 to 1.3.9-2.1 (1.1 KiB)

polarssl (1.3.9-2) unstable; urgency=medium


  * Disabled POLARSSL_SSL_PROTO_SSL3 at compile time to prevent potential
    attacks, TLS considered standard for clients now, and consistency w/
    OpenSSL in Debian

 -- Roland Stigge <email address hidden>  Fri, 07 Nov 2014 10:28:34 +0100

Available diffs

• diff from 1.3.7-2.1 to 1.3.9-2 (256.0 KiB)
• diff from 1.3.9-1 to 1.3.9-2 (872 bytes)

polarssl (1.3.9-1) unstable; urgency=medium


  * New upstream release

 -- Roland Stigge <email address hidden>  Wed, 05 Nov 2014 18:34:31 +0100

Available diffs

• diff from 1.3.8-1 to 1.3.9-1 (47.6 KiB)

polarssl (1.3.8-1) unstable; urgency=medium


  * New upstream release
  * debian/control: Adjust package description, thanks to Paul Bakker
    (upstream)
  * Removed CVE-2014-4911.patch (integrated upstream)

 -- Roland Stigge <email address hidden>  Sun, 31 Aug 2014 14:13:55 +0200

polarssl (1.3.7-2.1) unstable; urgency=high


  * Non-maintainer upload with maintainers approval.
  * Add CVE-2014-4911.patch patch.
    CVE-2014-4911: Fix Denial of Service against GCM enabled servers (and
    clients). (Closes: #754655)

 -- Salvatore Bonaccorso <email address hidden>  Tue, 15 Jul 2014 21:39:13 +0200

Available diffs

• diff from 1.3.7-2 to 1.3.7-2.1 (1.0 KiB)

polarssl (1.3.7-2) unstable; urgency=medium


  * Enabled POLARSSL_THREADING_C and POLARSSL_THREADING_PTHREAD in config,
    recommended for Debian by upstream

 -- Roland Stigge <email address hidden>  Mon, 05 May 2014 21:35:56 +0200

Available diffs

• diff from 1.3.4-1 to 1.3.7-2 (470.7 KiB)
• diff from 1.3.7-1 to 1.3.7-2 (802 bytes)

polarssl (1.3.7-1) unstable; urgency=medium


  * New upstream release (Closes: #745720)
  * Fixed .so link in libpolarssl-dev.links (Closes: #745716)

 -- Roland Stigge <email address hidden>  Fri, 02 May 2014 16:36:34 +0200

Available diffs

• diff from 1.3.6-1 to 1.3.7-1 (74.6 KiB)

polarssl (1.3.6-1) unstable; urgency=medium


  * New upstream release, SONAME version 6

 -- Roland Stigge <email address hidden>  Sat, 12 Apr 2014 10:18:43 +0200

polarssl (1.3.4-1) unstable; urgency=medium


  * New upstream release

 -- Roland Stigge <email address hidden>  Sun, 02 Feb 2014 11:42:57 +0100

Available diffs

• diff from 1.3.3-1 to 1.3.4-1 (49.6 KiB)

polarssl (1.3.3-1) unstable; urgency=medium


  * New upstream release
  * debian/control: Standards-Version: 3.9.5

 -- Roland Stigge <email address hidden>  Wed, 01 Jan 2014 19:07:10 +0100

Available diffs

• diff from 1.3.1-2 to 1.3.3-1 (681.5 KiB)
• diff from 1.3.2-1 to 1.3.3-1 (88.1 KiB)

polarssl (1.3.2-1) unstable; urgency=low


  * New upstream release
  * New SONAME (and adjustment to upstream SONAME counting) required new
    libpolarssl5

 -- Roland Stigge <email address hidden>  Tue, 05 Nov 2013 22:08:08 +0100

Available diffs

• diff from 1.3.1-2 to 1.3.2-1 (608.0 KiB)

polarssl (1.3.1-2) unstable; urgency=low


  * Fixed FTBFS on big endian arches via upstream patch (Closes: #727116)

 -- Roland Stigge <email address hidden>  Tue, 22 Oct 2013 16:56:09 +0200

Available diffs

• diff from 1.2.8-2 to 1.3.1-2 (525.2 KiB)
• diff from 1.3.1-1 to 1.3.1-2 (2.1 KiB)

polarssl (1.3.1-1) unstable; urgency=low


  * New upstream release
    - Fixes CVE-2013-5914, CVE-2013-5915 (Closes: #725359)
    - Fixes CVE-2013-4623 (Closes: #719954)
    - Fixes CVE-2009-3555 (Closes: #704946)

 -- Roland Stigge <email address hidden>  Wed, 16 Oct 2013 19:35:28 +0200

polarssl (1.2.8-2) unstable; urgency=low


  * Activate HAVEGE config option manually, needed since 1.2.8

 -- Roland Stigge <email address hidden>  Sun, 23 Jun 2013 11:11:31 +0200

Available diffs

• diff from 1.1.4-2 to 1.2.8-2 (499.4 KiB)
• diff from 1.2.7-1 to 1.2.8-2 (38.4 KiB)

polarssl (1.2.7-1) unstable; urgency=low


  * New upstream release

 -- Roland Stigge <email address hidden>  Sun, 05 May 2013 14:05:39 +0200

polarssl (0.12.1-1squeeze1build0.10.04.1) lucid-security; urgency=low

  * fake sync from Debian

Available diffs

• diff from 0.12.1-1 (in Ubuntu) to 0.12.1-1squeeze1build0.10.04.1 (1.8 KiB)

polarssl (1.1.4-2) unstable; urgency=high


  * Security fix for CVE-2013-0169: Lucky 13 TLS protocol timing flaw
    including CVE-2013-1621 and CVE-2013-1622, backported from upstream
    diff from 1.2.4 to 1.2.5. (Closes: #699887)

 -- Roland Stigge <email address hidden>  Thu, 07 Feb 2013 22:08:26 +0100

Available diffs

• diff from 1.1.4-1 to 1.1.4-2 (1.9 KiB)

polarssl (1.1.4-1) unstable; urgency=low


  * New upstream release

 -- Roland Stigge <email address hidden>  Sat, 02 Jun 2012 12:46:22 +0200

Available diffs

• diff from 1.1.3-1 to 1.1.4-1 (4.3 KiB)

polarssl (1.1.3-1) unstable; urgency=low


  * New upstream release

 -- Roland Stigge <email address hidden>  Tue, 01 May 2012 16:59:47 +0200

Available diffs

• diff from 1.1.1-1 to 1.1.3-1 (3.7 KiB)

polarssl (1.1.1-1) unstable; urgency=low


  * New upstream release

 -- Roland Stigge <email address hidden>  Tue, 24 Jan 2012 00:19:31 +0100

Available diffs

• diff from 1.1.0-1 to 1.1.1-1 (4.1 KiB)

polarssl (1.1.0-1) unstable; urgency=low


  * New upstream release
  * Updated debian/copyright
  * Removed the following patches (fixed upstream now):
    - 04-fix-type-rename.patch
    - 05-fix-testsuite-hangs.patch

 -- Roland Stigge <email address hidden>  Fri, 23 Dec 2011 18:11:18 +0100

Available diffs

• diff from 1.0.0-3 (in Ubuntu) to 1.1.0-1 (110.8 KiB)

polarssl (1.0.0-3) unstable; urgency=low

  * Added patch to fix testsuite hangs on s390x and sparc64, thanks
    to Aurelien Jarno (Closes: #650045)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  12 Dec 2011 12:01:17 +0000

Available diffs

• diff from 1.0.0-2 to 1.0.0-3 (866 bytes)

polarssl (1.0.0-2) unstable; urgency=low

  * Fixed bad SO file link in libpolarssl-dev
 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  24 Nov 2011 13:21:01 +0000

Available diffs

• diff from 1.0.0-1 to 1.0.0-2 (519 bytes)

polarssl (1.0.0-1) unstable; urgency=low

  * New upstream release
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  17 Oct 2011 13:46:17 +0000

Available diffs

• diff from 0.14.3-1 (in Debian) to 1.0.0-1 (344.7 KiB)

polarssl (0.14.3-1) unstable; urgency=low
  * New upstream release (Closes: #616114)  * New maintainer (Closes: #615247)  * Fixed debian/watch, thanks to Mats Erik Andersson (Closes: #620983)  * debian/control: Standards-Version: 3.9.2  * Source format: 3.0 (quilt)  * Included binaries in libpolarssl-runtime  * Included shared library in libpolarssl0  * Added testsuite build/run to build process -- Roland Stigge <email address hidden>  Mon, 25 Jul 2011 10:28:54 +0200

polarssl (0.12.1-1) unstable; urgency=low

  * New upstream release.
  * Use dh --with quilt for sexyness.
  * Bump standards-version, no change needed.
  * Tighten up dh build depend version.
  * Add debian/README.source.
  * Update watch file.
  * Refresh patches.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  23 Nov 2009 18:27:42 +0000

Available diffs

• diff from 0.11.1-1 to 0.12.1-1 (151.0 KiB)

polarssl (0.11.1-1) unstable; urgency=low

  * Fork xyssl package to polarssl to reflect upstream fork/takeover (Closes:
    #536697).
  * Refresh patches.
  * Switch to DH 7.
  * Bump Standards-Version, no change needed.