Bug#1003306: RFS: mbedtls/2.28.0-0.1 [NMU] -- lightweight crypto and SSL/TLS library

[Andrea Pappacoda <andrea@pappacoda.it>]

Package: sponsorship-requests
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear mentors,

I am looking for a sponsor for my package "mbedtls":

 * Package name    : mbedtls
   Version         : 2.28.0-0.1
 * URL             : https://github.com/ARMmbed/mbedtls
 * License         : Apache-2.0 or GPL-2+
 * Vcs             : https://salsa.debian.org/debian/mbedtls
   Section         : libs

It builds those binary packages:

  libmbedtls-dev - lightweight crypto and SSL/TLS library - development files
  libmbedcrypto7 - lightweight crypto and SSL/TLS library - crypto library
  libmbedtls14 - lightweight crypto and SSL/TLS library - tls library
  libmbedx509-1 - lightweight crypto and SSL/TLS library - x509 certificate
library
  libmbedtls-doc - lightweight crypto and SSL/TLS library - documentation

To access further information about this package, please visit the following
URL:

  https://mentors.debian.net/package/mbedtls/

Alternatively, one can download the package with dget using this command:

  dget -x
https://mentors.debian.net/debian/pool/main/m/mbedtls/mbedtls_2.28.0-0.1.dsc

Changes since the last upload:

 mbedtls (2.28.0-0.1) experimental; urgency=medium
 .
   * Non-maintainer upload
   * New upstream release
     - CVE-2021-44732. Closes: #1002631
     - CVE-2020-36477 fixed in 2.24.0
   * Enable CMAC support. Closes: #994681
   * Enable DTLS SRTP support. Closes: #1001862
   * Rename libraries due to upstream SONAME bump
   * d/libmbed{crypto,tls}*.symbols:
     - Update all symbol versions to 2.28
   * d/watch: use GitHub's API, look only for LTS releases

Regards,
- --
  Andrea Pappacoda


-----BEGIN PGP SIGNATURE-----

iIoEARYIADIWIQRm3vFSgpkMIZnvqAGooSioqxzuSQUCYdi0yRQcYW5kcmVhQHBh
cHBhY29kYS5pdAAKCRCooSioqxzuSbF5AQCF4/1wvZ3Kfc9PLoVev9PE5iSKAYLe
XivRqp0cxHfRGwD8CbEzDMHVL8slzIwMBVHgEZyO4AccWKtqnBerZPFqYQM=
=priO
-----END PGP SIGNATURE-----