build: bump Nettle version requirement from 3.6 to 3.10

Given Nettle 3.10 is ABI compatible with 3.6 and includes several
security relevant fixes, this updates the library's minimum
requirement of Nettle to 3.10. The bundled code will stay for the
next couple of release cycles in case any downstream issues are found,
as suggested in:
https://lists.gnupg.org/pipermail/gnutls-help/2025-November/004905.html

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/NEWS b/NEWS
index 5e319bbea462fd1cfe00ee700b35625d4618124c..0ae3c999199a88be18480ffe6974a4c614b4afa9 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -34,6 +34,11 @@ See the end for copying conditions.
    cryptography and the TLS use-case. To enable this, run configure
    with --enable-crypto-auditing.
 
+** build: The minimum version of Nettle has been updated to 3.10
+   Given Nettle 3.10 is ABI compatible with 3.6 and includes several
+   security relevant fixes, the library's minimum requirement of
+   Nettle is updated to 3.10.
+
 ** API and ABI modifications:
 gnutls_psk_allocate_client_credentials2: New function
 gnutls_psk_allocate_server_credentials2: New function

diff --git a/m4/hooks.m4 b/m4/hooks.m4
index b0907ca96d6121ba8782163f280d14ddd2e686d8..f52113553c1fedf5334de3815eae77f556a6ab96 100644 (file)
--- a/m4/hooks.m4
+++ b/m4/hooks.m4
@@ -68,7 +68,7 @@ AC_DEFUN([LIBGNUTLS_HOOKS],
   DLL_SSL_VERSION=`expr ${LT_SSL_CURRENT} - ${LT_SSL_AGE}`
   AC_SUBST(DLL_SSL_VERSION)
 
-NETTLE_MINIMUM=3.6
+NETTLE_MINIMUM=3.10
   PKG_CHECK_MODULES(NETTLE, [nettle >= $NETTLE_MINIMUM], [cryptolib="nettle"], [
 AC_MSG_ERROR([[
   ***