]> git.ipfire.org Git - ipfire-2.x.git/commitdiff
gnutls: Update to version 3.8.5
authorAdolf Belka <adolf.belka@ipfire.org>
Mon, 3 Jun 2024 14:47:29 +0000 (16:47 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Tue, 2 Jul 2024 09:05:03 +0000 (09:05 +0000)
- Update from version 3.8.3 to 3.8.5
- Update of rootfile
- Changelog
    3.8.5
** libgnutls: Due to majority of usages and implementations of
   RSA decryption with PKCS#1 v1.5 padding being incorrect,
   leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5
   is being deprecated (encryption and decryption) and will be
   disabled in the future. A new option `allow-rsa-pkcs1-encrypt`
   has been added into the system-wide library configuration which
   allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the
   RSAES-PKCS1-v1_5 is enabled by default.
** libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for
   backward compatibility with GCR.
** libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1
   v1.5 decryption error handling and deterministic ECDSA with earlier
   versions of GMP.  These were a regression introduced in the 3.8.4
   release. See #1535 and !1827.
** build: Fixed a bug where building gnutls statically failed due
   to a duplicate definition of nettle_rsa_compute_root_tr().
** API and ABI modifications:
GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/rootfiles/common/gnutls
lfs/gnutls

index 6cdaeb1511ed74fc158e75c7d03919814c2a8de1..6a5d1a3bf5eb69695de61b97700e7f5dc34d4fac 100644 (file)
@@ -32,7 +32,7 @@ usr/lib/libgnutls-dane.so.0.4.1
 #usr/lib/libgnutls.la
 #usr/lib/libgnutls.so
 usr/lib/libgnutls.so.30
-usr/lib/libgnutls.so.30.37.1
+usr/lib/libgnutls.so.30.39.0
 #usr/lib/libgnutlsxx.la
 #usr/lib/libgnutlsxx.so
 usr/lib/libgnutlsxx.so.30
@@ -1257,8 +1257,10 @@ usr/lib/libgnutlsxx.so.30.0.0
 #usr/share/man/man3/gnutls_x509_rdn_get_by_oid.3
 #usr/share/man/man3/gnutls_x509_rdn_get_oid.3
 #usr/share/man/man3/gnutls_x509_spki_deinit.3
+#usr/share/man/man3/gnutls_x509_spki_get_rsa_oaep_params.3
 #usr/share/man/man3/gnutls_x509_spki_get_rsa_pss_params.3
 #usr/share/man/man3/gnutls_x509_spki_init.3
+#usr/share/man/man3/gnutls_x509_spki_set_rsa_oaep_params.3
 #usr/share/man/man3/gnutls_x509_spki_set_rsa_pss_params.3
 #usr/share/man/man3/gnutls_x509_tlsfeatures_add.3
 #usr/share/man/man3/gnutls_x509_tlsfeatures_check_crt.3
index 39e1d0bd16e61918627f3a737e9c3fe6a898098a..81030e483f553c1d058acfba611582e9fac6cdaf 100644 (file)
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.8.3
+VER        = 3.8.5
 
 THISAPP    = gnutls-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 27a4bb4d8a5697e2187113351b2ad1e849bca7bcfb556c1b54fc2d02bef16e2789e7c437ac8db8fe6d2bcfc0e3e3467bbff2dd5d2fc0adb9bf8bda81cb89e452
+$(DL_FILE)_BLAKE2 = 30ea0e213b426df896af7cddfc39a7c50fd3130f99ced8386dc55e851122a37f6171722d2cb4abb68b9d2523cd3ba044b01248d740571a3bdd0cadf555894cdf
 
 install : $(TARGET)