From: Zoltan Fridrich Date: Fri, 20 Oct 2023 11:43:46 +0000 (+0200) Subject: Release 3.8.2 X-Git-Tag: 3.8.2^2 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bc09ff9e5167586bbd6998591feef29973ea0ba1;p=thirdparty%2Fgnutls.git Release 3.8.2 Signed-off-by: Zoltan Fridrich --- diff --git a/NEWS b/NEWS index f8a7b9a702..dabb4441f8 100644 --- a/NEWS +++ b/NEWS @@ -5,7 +5,10 @@ Copyright (C) 2000-2016 Free Software Foundation, Inc. Copyright (C) 2013-2019 Nikos Mavrogiannopoulos See the end for copying conditions. -* Version 3.8.2 (unreleased) +* Version 3.8.2 (released 2023-11-14) + +** libgnutls: Fix timing side-channel inside RSA-PSK key exchange. + [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981] ** libgnutls: Add API functions to perform ECDH and DH key agreement The functionality has been there for a long time though they were diff --git a/configure.ac b/configure.ac index f81d93edc0..4c898b35a3 100644 --- a/configure.ac +++ b/configure.ac @@ -21,7 +21,7 @@ dnl Process this file with autoconf to produce a configure script. AC_PREREQ(2.64) dnl when updating version also update LT_REVISION in m4/hooks.m4 -AC_INIT([GnuTLS], [3.8.1], [bugs@gnutls.org]) +AC_INIT([GnuTLS], [3.8.2], [bugs@gnutls.org]) AC_CONFIG_AUX_DIR([build-aux]) AC_CONFIG_MACRO_DIRS([m4 src/gl/m4 lib/unistring/m4]) AC_CANONICAL_HOST diff --git a/devel/abi-dump b/devel/abi-dump index 36a33a5e38..237f0723ef 160000 --- a/devel/abi-dump +++ b/devel/abi-dump @@ -1 +1 @@ -Subproject commit 36a33a5e38fbc648718ae999608f5112d72aa1a8 +Subproject commit 237f0723ef5f4aa47f299b16cc26d36839281b1f diff --git a/devel/libgnutls.abignore b/devel/libgnutls.abignore index d22aec8496..c19dce38e1 100644 --- a/devel/libgnutls.abignore +++ b/devel/libgnutls.abignore @@ -70,24 +70,3 @@ name = drbg_aes_reseed # The following should be removed in the new release, after updating the # abi-dump repository: -[suppress_function] -name = gnutls_pubkey_import_dh_raw - -[suppress_function] -name = gnutls_privkey_import_dh_raw - -[suppress_function] -name = gnutls_pubkey_export_dh_raw - -[suppress_function] -name = gnutls_privkey_export_dh_raw - -[suppress_function] -name = gnutls_x509_privkey_import_dh_raw - -[suppress_function] -name = gnutls_privkey_derive_secret - -[suppress_type] -name = gnutls_cipher_algorithm_t -changed_enumerators = GNUTLS_CIPHER_AES_128_SIV_GCM, GNUTLS_CIPHER_AES_256_SIV_GCM diff --git a/m4/hooks.m4 b/m4/hooks.m4 index 013d3d243e..f4238bac34 100644 --- a/m4/hooks.m4 +++ b/m4/hooks.m4 @@ -40,9 +40,9 @@ AC_DEFUN([LIBGNUTLS_HOOKS], # in CONTRIBUTION.md for more info. # # Interfaces removed: AGE=0 (+bump all symbol versions in .map) - AC_SUBST(LT_CURRENT, 66) + AC_SUBST(LT_CURRENT, 67) AC_SUBST(LT_REVISION, 0) - AC_SUBST(LT_AGE, 36) + AC_SUBST(LT_AGE, 37) AC_SUBST(LT_SSL_CURRENT, 27) AC_SUBST(LT_SSL_REVISION, 2)