From: Daiki Ueno <ueno@gnu.org>
Date: Tue, 16 Jan 2024 05:51:36 +0000 (+0900)
Subject: Release 3.8.3
X-Git-Tag: 3.8.3^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cb797bfb1609eed94fb68dd523f99f048dda940b;p=thirdparty%2Fgnutls.git

Release 3.8.3

Signed-off-by: Daiki Ueno <ueno@gnu.org>
---

diff --git a/NEWS b/NEWS
index dabb4441f8..5e32a3bf7a 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,22 @@ Copyright (C) 2000-2016 Free Software Foundation, Inc.
 Copyright (C) 2013-2019 Nikos Mavrogiannopoulos
 See the end for copying conditions.
 
+* Version 3.8.3 (released 2024-01-16)
+
+** libgnutls: Fix more timing side-channel inside RSA-PSK key exchange
+   [GNUTLS-SA-2024-01-14, CVSS: medium] [CVE-2024-0553]
+
+** libgnutls: Fix assertion failure when verifying a certificate chain with a
+   cycle of cross signatures
+   [GNUTLS-SA-2024-01-09, CVSS: medium] [CVE-2024-0567]
+
+** libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 token
+   certtool was unable to handle Ed25519 keys generated on PKCS#11
+   with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2.
+
+** API and ABI modifications:
+No changes since last version.
+
 * Version 3.8.2 (released 2023-11-14)
 
 ** libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
diff --git a/configure.ac b/configure.ac
index 4c898b35a3..d6f283a6ee 100644
--- a/configure.ac
+++ b/configure.ac
@@ -21,7 +21,7 @@ dnl Process this file with autoconf to produce a configure script.
 AC_PREREQ(2.64)
 
 dnl when updating version also update LT_REVISION in m4/hooks.m4
-AC_INIT([GnuTLS], [3.8.2], [bugs@gnutls.org])
+AC_INIT([GnuTLS], [3.8.3], [bugs@gnutls.org])
 AC_CONFIG_AUX_DIR([build-aux])
 AC_CONFIG_MACRO_DIRS([m4 src/gl/m4 lib/unistring/m4])
 AC_CANONICAL_HOST
diff --git a/m4/hooks.m4 b/m4/hooks.m4
index f4238bac34..d962cccf1d 100644
--- a/m4/hooks.m4
+++ b/m4/hooks.m4
@@ -41,7 +41,7 @@ AC_DEFUN([LIBGNUTLS_HOOKS],
   #
   # Interfaces removed:                           AGE=0 (+bump all symbol versions in .map)
   AC_SUBST(LT_CURRENT, 67)
-  AC_SUBST(LT_REVISION, 0)
+  AC_SUBST(LT_REVISION, 1)
   AC_SUBST(LT_AGE, 37)
 
   AC_SUBST(LT_SSL_CURRENT, 27)