mbedtls (2.28.3-1) unstable; urgency=medium
* New upstream version 2.28.3
We are now in the bookworm hard freeze, but I still think that releasing
this now is sensible. Importing new upstream LTS releases is the only way
of properly backporting mbedtls' security fixes, so this release should be
ported to bookworm, sooner or later.
* d/{control,rules}: honour nocheck and nodoc profiles
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 29 Mar 2023 21:39:41 +0200
mbedtls (2.28.2-1) unstable; urgency=medium
* New upstream version 2.28.2
* d/rules: remove .map files from libmbedtls-doc.
Thanks to Dennis Filder for reporting
-- Andrea Pappacoda <andrea@pappacoda.it> Thu, 15 Dec 2022 22:02:03 +0100
mbedtls (2.28.1-1) unstable; urgency=medium
* New upstream version 2.28.1
- Fixes CVE-2022-35409
* d/libmbedtls14.symbols: add mbedtls_ssl_check_curve_tls_id
-- Andrea Pappacoda <andrea@pappacoda.it> Tue, 12 Jul 2022 22:58:03 +0200
mbedtls (2.28.0-2) unstable; urgency=medium
* d/copyright: add Upstream-Contact
* Update upstream Git repository URL
* Fix build reproducibility
* Fix cross compilation
* CVE-2021-43666 fixed in 2.28.0
-- Andrea Pappacoda <andrea@pappacoda.it> Sun, 03 Apr 2022 12:22:05 +0200
mbedtls (2.28.0-1) unstable; urgency=medium
* Upload version 2.28 to unstable
* d/control: set myself as the Maintainer. Closes: #1004647
* d/rules: make builds reproducible
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 16 Feb 2022 11:52:38 +0100
mbedtls (2.28.0-0.3) unstable; urgency=medium
* Non-maintainer upload.
* Upload to unstable
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 16 Feb 2022 16:38:59 +0000
mbedtls (2.28.0-0.2) experimental; urgency=medium
* Non-maintainer upload
* d/copyright: MbedTLS is now Apache-2.0 only
* d/libmbedcrypto7.symbols: mark arch-dependent symbols
* d/watch: fix LTS watch
-- Andrea Pappacoda <andrea@pappacoda.it> Sun, 16 Jan 2022 21:45:45 +0100
mbedtls (2.28.0-0.1) experimental; urgency=medium
* Non-maintainer upload
* New upstream release
- CVE-2021-44732. Closes: #1002631
- CVE-2020-36477 fixed in 2.24.0
* Enable CMAC support. Closes: #994681
* Enable DTLS SRTP support. Closes: #1001862
* Rename libraries due to upstream SONAME bump
* d/libmbed{crypto,tls}*.symbols:
- Update all symbol versions to 2.28
* d/watch: use GitHub's API, look only for LTS releases
-- Andrea Pappacoda <andrea@pappacoda.it> Mon, 27 Dec 2021 15:17:15 +0100
mbedtls (2.16.11-0.3) unstable; urgency=medium
* Non-maintainer upload
* Drop CMAC support as it breaks ABI compat. Closes #1000289
- Updated libmbedcrypto3.symbols
* CVE-2021-24119 fixed in 2.16.10
-- Andrea Pappacoda <andrea@pappacoda.it> Fri, 26 Nov 2021 16:53:38 +0100
mbedtls (2.16.11-0.2) unstable; urgency=medium
* Non-maintainer upload.
[ Steve Langasek ]
* Make autopkgtests cross-test-friendly (Closes: #953143).
-- Gianfranco Costamagna <locutusofborg@debian.org> Sat, 20 Nov 2021 22:30:00 +0100
mbedtls (2.16.11-0.1) unstable; urgency=medium
* Non-maintainer upload
* New upstream release
* Enable CMAC support. Closes: #994681
- Updated libmbedcrypto3.symbols
* d/control: Bump Standards-Version to 4.6.0
* d/control: Use debhelper-compat (= 13)
* d/rules: use scripts/config.pl instead of manually editing config.h
* d/rules: add -DENABLE_PROGRAMS=OFF to skip building not installed binaries
* Add debian/upstream/metadata file
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 17 Nov 2021 17:08:07 +0100
mbedtls (2.16.9-0.1) unstable; urgency=medium
* Non-maintainer upload
* New upstream release
* Fixes CVE-2020-10932 (Closes: #963159)
* Fixes CVE-2020-16150 (Closes: #972806)
* Updated watch and Homepage to new github upstream
* Updated symbols file (two new for 2.6.19)
-- Wookey <wookey@debian.org> Thu, 17 Dec 2020 18:55:19 +0000
mbedtls (2.16.5-1) unstable; urgency=medium
* New upstream release.
-- James Cowgill <jcowgill@debian.org> Sat, 29 Feb 2020 22:26:47 +0000
mbedtls (2.16.4-1) unstable; urgency=medium
* New upstream release.
- Fixes CVE-2019-18222 - Side channel attack on ECDSA.
* d/control: Bump standards version to 4.5.0.
* d/libmbedcrypto3.symbols: Add new mbedtls_mpi_lt_mpi_ct symbol.
-- James Cowgill <jcowgill@debian.org> Tue, 28 Jan 2020 23:38:13 +0000
mbedtls (2.16.3-1) unstable; urgency=medium
* New upstream release.
- Fixes CVE-2019-16910 - Side channel attack on deterministic
ECDSA. (Closes: #941265)
* d/libmbedcrypto3.symbols:
- Add new mbedtls_ecdsa_sign_det_ext symbol.
-- James Cowgill <jcowgill@debian.org> Sat, 28 Sep 2019 21:39:18 +0100
mbedtls (2.16.2-1) unstable; urgency=medium
* New upstream release.
* d/control: Use debhelper compat 12.
* d/libmbedx509-0.symbols: Add new test symbols.
* d/not-installed: Add file listing mbedTLS programs.
-- James Cowgill <jcowgill@debian.org> Mon, 15 Jul 2019 23:18:37 +0100
# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libmbedtls14`.
Generated by dwww version 1.15 on Sat May 18 05:37:46 CEST 2024.