- Update from version 3.8.3 to 3.8.5 - Update of rootfile - Changelog 3.8.5 ** libgnutls: Due to majority of usages and implementations of RSA decryption with PKCS#1 v1.5 padding being incorrect, leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5 is being deprecated (encryption and decryption) and will be disabled in the future. A new option `allow-rsa-pkcs1-encrypt` has been added into the system-wide library configuration which allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the RSAES-PKCS1-v1_5 is enabled by default. ** libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for backward compatibility with GCR. ** libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1 v1.5 decryption error handling and deterministic ECDSA with earlier versions of GMP. These were a regression introduced in the 3.8.4 release. See #1535 and !1827. ** build: Fixed a bug where building gnutls statically failed due to a duplicate definition of nettle_rsa_compute_root_tr(). ** API and ABI modifications: GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/gnutls | 4 +++- lfs/gnutls | 4 ++-- 2 files changed, 5 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/gnutls b/config/rootfiles/common/gnutls index 6cdaeb151..6a5d1a3bf 100644 --- a/config/rootfiles/common/gnutls +++ b/config/rootfiles/common/gnutls @@ -32,7 +32,7 @@ usr/lib/libgnutls-dane.so.0.4.1 #usr/lib/libgnutls.la #usr/lib/libgnutls.so usr/lib/libgnutls.so.30 -usr/lib/libgnutls.so.30.37.1 +usr/lib/libgnutls.so.30.39.0 #usr/lib/libgnutlsxx.la #usr/lib/libgnutlsxx.so usr/lib/libgnutlsxx.so.30 @@ -1257,8 +1257,10 @@ usr/lib/libgnutlsxx.so.30.0.0 #usr/share/man/man3/gnutls_x509_rdn_get_by_oid.3 #usr/share/man/man3/gnutls_x509_rdn_get_oid.3 #usr/share/man/man3/gnutls_x509_spki_deinit.3 +#usr/share/man/man3/gnutls_x509_spki_get_rsa_oaep_params.3 #usr/share/man/man3/gnutls_x509_spki_get_rsa_pss_params.3 #usr/share/man/man3/gnutls_x509_spki_init.3 +#usr/share/man/man3/gnutls_x509_spki_set_rsa_oaep_params.3 #usr/share/man/man3/gnutls_x509_spki_set_rsa_pss_params.3 #usr/share/man/man3/gnutls_x509_tlsfeatures_add.3 #usr/share/man/man3/gnutls_x509_tlsfeatures_check_crt.3 diff --git a/lfs/gnutls b/lfs/gnutls index 39e1d0bd1..81030e483 100644 --- a/lfs/gnutls +++ b/lfs/gnutls @@ -24,7 +24,7 @@
include Config
-VER = 3.8.3 +VER = 3.8.5
THISAPP = gnutls-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 27a4bb4d8a5697e2187113351b2ad1e849bca7bcfb556c1b54fc2d02bef16e2789e7c437ac8db8fe6d2bcfc0e3e3467bbff2dd5d2fc0adb9bf8bda81cb89e452 +$(DL_FILE)_BLAKE2 = 30ea0e213b426df896af7cddfc39a7c50fd3130f99ced8386dc55e851122a37f6171722d2cb4abb68b9d2523cd3ba044b01248d740571a3bdd0cadf555894cdf
install : $(TARGET)