glib-networking (2.64.2-1) [PTS] [DDPO]

NEW: VCS has unreleased changes: 2.64.3-1 > 2.64.2-1

Git: https://salsa.debian.org/gnome-team/glib-networking.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/master
Path: debian/changelog
Browser: https://salsa.debian.org/gnome-team/glib-networking
Last scan: 2020-05-29 10:36:23+00
Next scan: 2020-06-06 20:37:00+00

Debian changelog in Git:

glib-networking (2.64.3-1) UNRELEASED; urgency=medium

  * New upstream release
    - Don't behave as though server TLS certificate had been verified
      successfully if the application didn't specify the expected identity.
      (CVE-2020-13645, Closes: #961756; the only application known to be
      affected is balsa).

 -- Simon McVittie <smcv@debian.org>  Fri, 29 May 2020 10:27:49 +0100

This branch is 8 commits ahead of tag debian/2.64.2-1

Git log:

commit 356a05eb85877e075c248753d933b3c9465a8a17
Author: Simon McVittie <smcv@debian.org>
Date:   Fri May 29 10:27:49 2020 +0100

    New upstream release

commit 56ea71c4529e04988e0a01ea116fa7032e6a8b8f
Merge: 237b00d dc0e03b
Author: Simon McVittie <smcv@debian.org>
Date:   Fri May 29 10:27:49 2020 +0100

    Update upstream source from tag 'upstream/2.64.3'
    
    Update to upstream version '2.64.3'
    with Debian dir 64b11236b7ea6f302a14b49d17aeeb5bb82fcd54

commit dc0e03bbac65205332d2ecb5c3dcd4b00294dd19
Merge: 0ef6279 533d3a7
Author: Simon McVittie <smcv@debian.org>
Date:   Fri May 29 10:27:49 2020 +0100

    New upstream version 2.64.3

commit 533d3a76e2cc622b072e3ec789f69e888f3fd8eb
Author: Michael Catanzaro <mcatanzaro@gnome.org>
Date:   Thu May 28 18:31:39 2020 -0500

    Prepare 2.64.3

commit dbc8d69f58b07f6ed091aa123e5d40a53573a5fc
Author: Michael Catanzaro <mcatanzaro@gnome.org>
Date:   Mon May 4 17:47:28 2020 -0500

    Return bad identity error if identity is unset
    
    When the server-identity property of GTlsClientConnection is unset, the
    documentation sasy we need to fail the certificate verification with
    G_TLS_CERTIFICATE_BAD_IDENTITY. This is important because otherwise,
    it's easy for applications to fail to specify server identity.
    
    Unfortunately, we did not correctly implement the intended, documented
    behavior. When server identity is missing, we check the validity of the
    TLS certificate, but do not check if it corresponds to the expected
    server (since we have no expected server). Then we assume the identity
    is good, instead of returning bad identity, as documented. This means,
    for example, that evil.com can present a valid certificate issued to
    evil.com, and we would happily accept it for paypal.com.
    
    Fixes #135

commit 7d6428e21a0b874817dcffc7a239c9a1e67a79d8
Author: Christoph Reiter <reiter.christoph@gmail.com>
Date:   Fri May 1 13:29:38 2020 +0200

    CI: Switch to new Windows runners
    
    win32-ps instead of win32.
    Uses powershell instead of cmd and Windows 2016 instead fo 2020r2

commit ebac9da6596c87eb53f803829865d7d5b4c5d3c7
Author: Michael Catanzaro <mcatanzaro@gnome.org>
Date:   Mon May 4 22:34:41 2020 +0000

    Revert "Warn when performing certificate verification if server-identity is NULL"
    
    This reverts commit 412a9cff10b0d69f047038ec38a1007541346c10

commit 0c37281981bc30135905709d1daa5e8345466da7
Author: Dz Chen <wsxy162@gmail.com>
Date:   Sat Apr 18 10:20:06 2020 +0000

    Update Chinese (China) translation