From 10c92e7f9d31b94dc7319c9b4ab08a12aae44882 Mon Sep 17 00:00:00 2001 From: Simon Josefsson Date: Mon, 10 Aug 2009 14:44:38 +0200 Subject: Generated. --- ChangeLog | 156 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 156 insertions(+) diff --git a/ChangeLog b/ChangeLog index b3f7dde82d..40430ed80c 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,159 @@ +2009-08-10 Simon Josefsson + + * NEWS: Version 2.8.2. + +2009-08-10 Simon Josefsson + + * NEWS: Add. + +2009-08-10 Simon Josefsson + + * lib/gnutls_global.c: Look only for latest _required_ + libgcrypt/libtasn1 version. Reported by Marco d'Itri via Andreas Metzler + as Debian BTS #540449. + +2009-08-10 Simon Josefsson + + * NEWS: Add. + +2009-07-01 Nikos Mavrogiannopoulos + + * lib/gnutls_str.c: There are cases where those buffers might + overlap + +2009-08-07 Simon Josefsson + + * NEWS: Add. + +2009-08-03 Simon Josefsson + + * tests/chainverify.c: Fix expected output, a cert have expired. + +2009-08-03 Simon Josefsson + + * tests/mini-eagain.c: Make it build. + +2009-08-07 Simon Josefsson + + * lib/x509/output.c: Check for NUL in SANs and replace accordingly. + +2009-08-07 Simon Josefsson + + * lib/x509/common.c: Refuse to return DNs with embedded NULs which + breaks other code. Problem published by Dan Kaminsky and Moxie Marlinspike at + BlackHat09. + +2009-06-03 Simon Josefsson + + * lib/x509/common.c: (_gnutls_x509_oid_data2string): Return proper @res_size for NULL + res. + +2009-08-04 Simon Josefsson + + * lib/gnutls_str.c: Cleanup code. + +2009-08-04 Tomas Hoger + + * lib/gnutls_str.c, lib/gnutls_str.h, lib/openpgp/pgp.c, + lib/x509/rfc2818_hostname.c: GnuTLS vs. NULL chars in CNs Check cert name size in _gnutls_hostname_compare() This is needed to protect against NULL (\0) characters embedded + in X509 certificates' CNs or subjectAltNames, that can be used + to fool SSL certificate verification as was demonstrated by Moxie + Marlinspike on BH USA 2009: + http://www.blackhat.com/html/bh-usa-09/bh-usa-09-archives.html#MarlinspikeSigned-off-by: Simon Josefsson + +2009-08-07 Simon Josefsson + + * NEWS: Add. + +2009-06-17 Simon Josefsson + + * lib/gnutls_ui.c: Return proper MPI lengths in bits. Reported by + Peter Hendrickson in + + . + +2009-08-07 Simon Josefsson + + * NEWS: Fix. + +2009-08-07 Simon Josefsson + + * NEWS: Add. + +2009-06-22 Simon Josefsson + + * lib/x509/dn.c: Fix off-by-one size computation that leads to + truncated strings. Reported by Tim Kosse + in + + . + +2009-07-29 Simon Josefsson + + * : commit 872048c5dd438a2c8f6c307d8b303b8cf8be174f Author: Nikos + Mavrogiannopoulos Date: Mon Jul 13 20:17:56 2009 + +0300 + +2009-07-01 Nikos Mavrogiannopoulos + + * lib/gnutls_handshake.c: Patch by Tim Kosse: "If + _gnutls_send_finished fails with GNUTLS_E_AGAIN or GNUTLS_E_AGAIN it + eventually gets called a second time. It however does not call _gnutls_send_handshake with a NULL pointer + on repeated calls, ultimately leading to an internal error in + _gnutls_handshake_io_send_int." + +2009-07-29 Simon Josefsson + + * NEWS, lib/minitasn1/errors.c, lib/minitasn1/libtasn1.h: Use + libtasn1 v2.3. + +2009-07-29 Simon Josefsson + + * NEWS: Add NEWS entry. + +2009-07-29 Simon Josefsson + + * NEWS, configure.ac, lib/configure.ac, lib/m4/hooks.m4, + libextra/configure.ac: Bump version. + +2009-07-01 Nikos Mavrogiannopoulos + + * lib/auth_cert.h, lib/gnutls_ui.c: Corrected + gnutls_certificate_client_get_request_status(). Based on observation + by Peter Hendrickson . + +2009-07-26 Nikos Mavrogiannopoulos + + * lib/minitasn1/decoding.c: more careful decoding of OID. + +2009-07-26 Nikos Mavrogiannopoulos + + * lib/x509/common.c: do not allow null character in DN. + +2009-07-15 Nikos Mavrogiannopoulos + + * doc/examples/ex-serv-anon.c, doc/examples/ex-serv-export.c, + doc/examples/ex-serv-pgp.c, doc/examples/ex-serv-psk.c, + doc/examples/ex-serv-srp.c, doc/examples/ex-serv1.c, + lib/auth_cert.c, lib/gnutls_buffers.c, lib/gnutls_mpi.c, + lib/gnutls_pk.c, lib/gnutls_sig.c, lib/opencdk/stream.c, + lib/opencdk/write-packet.c, lib/openpgp/pgp.c, + lib/openpgp/privkey.c, lib/x509/privkey_pkcs8.c, src/certtool.c, + src/psk.c: Several bug fixes by Fabian Keil (some were modified by + me). + +2009-07-01 Nikos Mavrogiannopoulos + + * lib/gnutls_buffers.c, tests/Makefile.am, tests/mini-eagain.c: + Added bug fix that allows gnutls_record_recv/send resuming from + previously interrupted actions. Patch by from Tim Kosse + . Added a self test to check those functions in handling interrupted + states. + +2009-06-10 Simon Josefsson + + * ChangeLog: Generated. + 2009-06-10 Simon Josefsson * NEWS: Version 2.8.1. -- cgit v1.2.1