From: Adolf Belka <adolf.belka@ipfire.org>
To: development@lists.ipfire.org
Subject: [PATCH] gnutls: Update to version 3.8.5
Date: Mon, 03 Jun 2024 16:47:29 +0200 [thread overview]
Message-ID: <20240603144731.2620910-3-adolf.belka@ipfire.org> (raw)
In-Reply-To: <20240603144731.2620910-1-adolf.belka@ipfire.org>
[-- Attachment #1: Type: text/plain, Size: 3138 bytes --]
- Update from version 3.8.3 to 3.8.5
- Update of rootfile
- Changelog
3.8.5
** libgnutls: Due to majority of usages and implementations of
RSA decryption with PKCS#1 v1.5 padding being incorrect,
leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5
is being deprecated (encryption and decryption) and will be
disabled in the future. A new option `allow-rsa-pkcs1-encrypt`
has been added into the system-wide library configuration which
allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the
RSAES-PKCS1-v1_5 is enabled by default.
** libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for
backward compatibility with GCR.
** libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1
v1.5 decryption error handling and deterministic ECDSA with earlier
versions of GMP. These were a regression introduced in the 3.8.4
release. See #1535 and !1827.
** build: Fixed a bug where building gnutls statically failed due
to a duplicate definition of nettle_rsa_compute_root_tr().
** API and ABI modifications:
GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
config/rootfiles/common/gnutls | 4 +++-
lfs/gnutls | 4 ++--
2 files changed, 5 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/gnutls b/config/rootfiles/common/gnutls
index 6cdaeb151..6a5d1a3bf 100644
--- a/config/rootfiles/common/gnutls
+++ b/config/rootfiles/common/gnutls
@@ -32,7 +32,7 @@ usr/lib/libgnutls-dane.so.0.4.1
#usr/lib/libgnutls.la
#usr/lib/libgnutls.so
usr/lib/libgnutls.so.30
-usr/lib/libgnutls.so.30.37.1
+usr/lib/libgnutls.so.30.39.0
#usr/lib/libgnutlsxx.la
#usr/lib/libgnutlsxx.so
usr/lib/libgnutlsxx.so.30
@@ -1257,8 +1257,10 @@ usr/lib/libgnutlsxx.so.30.0.0
#usr/share/man/man3/gnutls_x509_rdn_get_by_oid.3
#usr/share/man/man3/gnutls_x509_rdn_get_oid.3
#usr/share/man/man3/gnutls_x509_spki_deinit.3
+#usr/share/man/man3/gnutls_x509_spki_get_rsa_oaep_params.3
#usr/share/man/man3/gnutls_x509_spki_get_rsa_pss_params.3
#usr/share/man/man3/gnutls_x509_spki_init.3
+#usr/share/man/man3/gnutls_x509_spki_set_rsa_oaep_params.3
#usr/share/man/man3/gnutls_x509_spki_set_rsa_pss_params.3
#usr/share/man/man3/gnutls_x509_tlsfeatures_add.3
#usr/share/man/man3/gnutls_x509_tlsfeatures_check_crt.3
diff --git a/lfs/gnutls b/lfs/gnutls
index 39e1d0bd1..81030e483 100644
--- a/lfs/gnutls
+++ b/lfs/gnutls
@@ -24,7 +24,7 @@
include Config
-VER = 3.8.3
+VER = 3.8.5
THISAPP = gnutls-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 27a4bb4d8a5697e2187113351b2ad1e849bca7bcfb556c1b54fc2d02bef16e2789e7c437ac8db8fe6d2bcfc0e3e3467bbff2dd5d2fc0adb9bf8bda81cb89e452
+$(DL_FILE)_BLAKE2 = 30ea0e213b426df896af7cddfc39a7c50fd3130f99ced8386dc55e851122a37f6171722d2cb4abb68b9d2523cd3ba044b01248d740571a3bdd0cadf555894cdf
install : $(TARGET)
--
2.45.1
next prev parent reply other threads:[~2024-06-03 14:47 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-06-03 14:47 [PATCH] fetchmail: Update to version 6.4.38 Adolf Belka
2024-06-03 14:47 ` [PATCH] git: Update to version 2.45.2 Adolf Belka
2024-06-03 14:47 ` Adolf Belka [this message]
2024-06-03 14:47 ` [PATCH] libedit: Update to version 20240517-3.1 Adolf Belka
2024-06-03 14:47 ` [PATCH] wsdd: Update to version 0.8 Adolf Belka
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20240603144731.2620910-3-adolf.belka@ipfire.org \
--to=adolf.belka@ipfire.org \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox