Accepted gnutls28 3.6.13-1 (source) into experimental
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 02 Apr 2020 18:31:26 +0200
Source: gnutls28
Architecture: source
Version: 3.6.13-1
Distribution: experimental
Urgency: low
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Closes: 955556
Changes:
gnutls28 (3.6.13-1) experimental; urgency=low
.
* New upstream version.
+ libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3
support), since 3.6.3. The DTLS client would not contribute any
randomness to the DTLS negotiation, breaking the security
guarantees of the DTLS protocol
GNUTLS-SA-2020-03-31 Closes: #955556
* Fix guile lintian override for shared-lib-without-dependency-information.
Checksums-Sha1:
272e484acdc5bafdf48a8e332815c4b52a8f579a 3479 gnutls28_3.6.13-1.dsc
0d3d0d093d6a7cf589612a7c21dbb46cb31c644b 5958956 gnutls28_3.6.13.orig.tar.xz
3d2d78191dbdfbb8e07a78ffe5670e922eee4295 667 gnutls28_3.6.13.orig.tar.xz.asc
1400e8bbbdfabe1e4c15af12e4e2ff12c1c5f836 61132 gnutls28_3.6.13-1.debian.tar.xz
Checksums-Sha256:
51561dddbeb41e8d62fe1bb424388762f8670b528c033c31c6e9e3923f14ebdc 3479 gnutls28_3.6.13-1.dsc
32041df447d9f4644570cf573c9f60358e865637d69b7e59d1159b7240b52f38 5958956 gnutls28_3.6.13.orig.tar.xz
79eb677b19a35de2f17d2ea87e863755cd53f0072b9435c8a4b57669360f57d0 667 gnutls28_3.6.13.orig.tar.xz.asc
3a869c2c6a7c74a82505f478a627623ca608dd6eef2cffbba092cd1193478ecf 61132 gnutls28_3.6.13-1.debian.tar.xz
Files:
4ca256412b6bc4c78e109f6716031b28 3479 libs optional gnutls28_3.6.13-1.dsc
bb1fe696a11543433785b4fc70ca225f 5958956 libs optional gnutls28_3.6.13.orig.tar.xz
494be401f3be594122fe227f83b894ee 667 libs optional gnutls28_3.6.13.orig.tar.xz.asc
449eca95583140a60be193ea033680f9 61132 libs optional gnutls28_3.6.13-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=Ztqm
-----END PGP SIGNATURE-----