Bug#844539: closed by Andreas Metzler <ametzler at debian.org> (Bug#844539: fixed in gnutls28 3.5.6-6)

Thu Nov 17 19:21:09 UTC 2016

Andreas, thank you for handling this so quickly!
 -- Guido

On Thu, Nov 17, 2016 at 07:06:06PM +0000, Debian Bug Tracking System wrote:
> This is an automatic notification regarding your Bug report
> which was filed against the libgnutls30 package:
> 
> #844539: Please revert DN related behaviour change introduced in 3.5.6
> 
> It has been closed by Andreas Metzler <ametzler at debian.org>.
> 
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a
> better one in a separate message then please contact Andreas Metzler <ametzler at debian.org> by
> replying to this email.
> 
> 
> -- 
> 844539: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844539
> Debian Bug Tracking System
> Contact owner at bugs.debian.org with problems

> From: Andreas Metzler <ametzler at debian.org>
> To: 844539-close at bugs.debian.org
> Date: Thu, 17 Nov 2016 19:03:47 +0000
> Subject: Bug#844539: fixed in gnutls28 3.5.6-6
> X-Spam-Level: 
> X-Spam-Status: No, score=-15.8 required=4.0 tests=BAYES_00,DIGITS_LETTERS,
>  FOURLA,FROMDEVELOPER,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MURPHY_DRUGS_REL8,
>  PGPSIGNATURE,RP_MATCHES_RCVD autolearn=ham autolearn_force=no
>  version=3.4.0-bugs.debian.org_2005_01_02
> Message-Id: <E1c7RyN-0004G6-R5 at fasolo.debian.org>
> 
> Source: gnutls28
> Source-Version: 3.5.6-6
> 
> We believe that the bug you reported is fixed in the latest version of
> gnutls28, which is due to be installed in the Debian FTP archive.
> 
> A summary of the changes between this version and the previous one is
> attached.
> 
> Thank you for reporting the bug, which will now be closed.  If you
> have further comments please address them to 844539 at bugs.debian.org,
> and the maintainer will reopen the bug report if appropriate.
> 
> Debian distribution maintenance software
> pp.
> Andreas Metzler <ametzler at debian.org> (supplier of updated gnutls28 package)
> 
> (This message was generated automatically at their request; if you
> believe that there is a problem with it please contact the archive
> administrators by mailing ftpmaster at ftp-master.debian.org)
> 
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> Format: 1.8
> Date: Thu, 17 Nov 2016 19:15:20 +0100
> Source: gnutls28
> Binary: libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc libgnutlsxx28 libgnutls-openssl27 libgnutls-dane0
> Architecture: source
> Version: 3.5.6-6
> Distribution: experimental
> Urgency: medium
> Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>
> Changed-By: Andreas Metzler <ametzler at debian.org>
> Closes: 844539
> Description: 
>  gnutls-bin - GNU TLS library - commandline utilities
>  gnutls-doc - GNU TLS library - documentation and examples
>  libgnutls28-dev - GNU TLS library - development files
>  libgnutls30 - GNU TLS library - main runtime library
>  libgnutls-dane0 - GNU TLS library - DANE security support
>  libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
>  libgnutlsxx28 - GNU TLS library - C++ runtime library
> Changes:
>  gnutls28 (3.5.6-6) experimental; urgency=medium
>  .
>    * Pull a patch set from upstream GIT which reverts the DN sorting change in
>      3.5.6 and adds new functions to provide a RFC4514 compliant sorting.
>      Closes: #844539
>      41_01_Introduced-new-functions-to-allow-multiple-DN-parsin.patch
>      41_02__gnutls_x509_get_dn-when-no-data-ensure-we-return-GN.patch
>      41_03_certtool-use-the-new-APIs-for-DN-extraction.patch
>      41_04_cleanups-in-_gnutls_buffer_to_datum.patch
>      41_05_x509-output-use-the-new-functions-for-DN-output.patch
>      41_07_tests-account-for-the-strict-RFC4514-compliance-reve.patch
>      41_08_pkcs7-output-use-the-new-functions-for-DN-output.patch
>    * Update symbol file.
> Checksums-Sha1: 
>  d0afc63ce6dd61d3b762b3148f2d6ce7b5dcf930 3226 gnutls28_3.5.6-6.dsc
>  b16ff3fc685eb20a426b34e2bbdbe2481fe3fcb7 115120 gnutls28_3.5.6-6.debian.tar.xz
> Checksums-Sha256: 
>  4ee6c67c0a53b6efd74a02e3f0019df3e75c0edddb2fcefd69acc9c57f978a5d 3226 gnutls28_3.5.6-6.dsc
>  82fde261dc430f9ed4451bbd052eb50a10bc5cd1808af0dbe764ec12da0d2b15 115120 gnutls28_3.5.6-6.debian.tar.xz
> Files: 
>  1c269631e63b0b36aca8df412994f62e 3226 libs optional gnutls28_3.5.6-6.dsc
>  56aaf848adf6251263990909c3b8286e 115120 libs optional gnutls28_3.5.6-6.debian.tar.xz
> 
> -----BEGIN PGP SIGNATURE-----
> 
> iQIcBAEBCgAGBQJYLftfAAoJEKVPAYVDghSEHiIP/3qab8DuVCAute3QwOKOy53y
> l+UZrF8LHzx3/vABQKQYHHs9rBubY4mn4r2/fGZcpNQWKsjmnVg1hgFcqrBZH/Wo
> VWeUOKiYUeT1UQ1PKkrEhylCwegrdohMQPETA68LTXup7SPaByqMl1oenJI9N0N5
> uUa9/kzUIjX+nGOVFlcEF6cWuxTyeGvbd+sf1WIoT4TCqhqTgzsfzOi6M2SUqXQL
> DCGYkJmfAxHCO7rrpqY//A8aEKMktxdiHkchFzrWDFyClqiQNONDubnMAEh03ySD
> 7WjQ7m5WwSMYKjMthutGl40+cnNWvjVWUZ3VpMkSoMAjx5bHfIKd5gVgDKSsOmw+
> k0JWvPYLJra+I1DSLYbi/axmSFbYomnAcK/DWE5Z/TM0zHXV8ZjPiuWCFOthBN7p
> GhKQkX1WDTrnRkSiUWenU8I3n0l7D+VUXRuMVrNURGiBuRq6ndawgv9StAUWpRSA
> dcfFD+UjD7gMRDG84LyVSVg3BDacjz0LgVJWrTT6x292PNvcrPYDq20xrOoXN7oB
> qx8jIsgqWdU9Htv2EG/PF6hjxGftf7btQIuGezjxbVsuxoD8HvAzGwGqpXhlgS/c
> 9T/00ceLqnAv2CrqiDnDoESa15VNIRVvGA/ezHe8fna9vzDbY40EJKsQuAExyrUJ
> 1tFoFPnjpAzy+41Gs5XL
> =qrXu
> -----END PGP SIGNATURE-----

> From: Guido Günther <agx at sigxcpu.org>
> To: Debian Bug Tracking System <submit at bugs.debian.org>
> Date: Wed, 16 Nov 2016 18:54:41 +0100
> Subject: Please revert DN related behaviour change introduced in 3.5.6
> X-Spam-Level: 
> X-Spam-Status: No, score=-11.3 required=4.0
>  tests=BAYES_00,FOURLA,HAS_PACKAGE, RP_MATCHES_RCVD,URIBL_CNKR
>  autolearn=ham autolearn_force=no version=3.4.0-bugs.debian.org_2005_01_02
> Message-ID: <20161116175441.e2d3zqfdh2bp73a2 at bogon.m.sigxcpu.org>
> 
> Package: libgnutls30
> Version: 3.5.6-4
> Severity: normal
> 
> Hi,
> 3.5.6 introuced a behaviour change that breaks libvirt. See
> 
>     https://lists.gnupg.org/pipermail/gnutls-devel/2016-November/008224.html
> 
> and look for  "FAIL: virnettlssessiontest".
> 
> The upstream discussion is here:
> 
>     https://lists.gnupg.org/pipermail/gnutls-devel/2016-November/008224.html
> 
> and it seems this will be reverted. Please revert that change in Debian
> too so it unbreaks libvirt.
> Cheers and thanks for maintaining gnutls in Debian,
>  -- Guido
>     
> 
> -- System Information:
> Debian Release: stretch/sid
>   APT prefers testing
>   APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
> 
> Kernel: Linux 4.7.0-1-amd64 (SMP w/4 CPU cores)
> Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
> 
> Versions of packages libgnutls30 depends on:
> ii  libc6        2.24-5
> ii  libgmp10     2:6.1.1+dfsg-1
> ii  libhogweed4  3.3-1
> ii  libidn11     1.33-1
> ii  libnettle6   3.3-1
> ii  libp11-kit0  0.23.2-5
> ii  libtasn1-6   4.9-4
> ii  zlib1g       1:1.2.8.dfsg-2+b3
> 
> libgnutls30 recommends no packages.
> 
> Versions of packages libgnutls30 suggests:
> ii  gnutls-bin  3.5.5-6
> 
> -- no debconf information