Copyright (C) 2013-2019 Nikos Mavrogiannopoulos
See the end for copying conditions.
-* Version 3.8.10 (unreleased)
+* Version 3.8.10 (released 2025-07-08)
** libgnutls: Fix NULL pointer dereference when 2nd Client Hello omits PSK
Reported by Stefan Bühler. [GNUTLS-SA-2025-07-07-4, CVSS: medium]
cryptographic backend. Use the [provider] section in the system-wide config
to specify path and pin to the module (see system-wide config Documentation).
-** libgnutls: Linux kernel version 6.14 bring a Kernel TLS (kTLS) key update
+** libgnutls: Linux kernel version 6.14 brings a Kernel TLS (kTLS) key update
support. The library running on the aforementioned version now utilizes the
kernel’s key update mechanism when kTLS is enabled, allowing uninterrupted
TLS session. The --enable-ktls configure option as well as the system-wide
ML-DSA-87, can now be used to digitally sign TLS handshake
messages.
+** API and ABI modifications:
+GNUTLS_PKCS_MLDSA_SEED: New enum member of gnutls_pkcs_encrypt_flags_t
+GNUTLS_PKCS_MLDSA_EXPANDED: New enum member of gnutls_pkcs_encrypt_flags_t
+
* Version 3.8.9 (released 2025-02-07)
** libgnutls: leancrypto was added as an interim option for PQC
AC_PREREQ([2.71])
dnl when updating version also update LT_REVISION in m4/hooks.m4
-AC_INIT([GnuTLS],[3.8.9],[bugs@gnutls.org])
+AC_INIT([GnuTLS],[3.8.10],[bugs@gnutls.org])
AC_CONFIG_AUX_DIR([build-aux])
AC_CONFIG_MACRO_DIRS([m4 src/gl/m4 lib/unistring/m4])
AC_CANONICAL_HOST
#
# Interfaces removed: AGE=0 (+bump all symbol versions in .map)
AC_SUBST(LT_CURRENT, 70)
- AC_SUBST(LT_REVISION, 3)
+ AC_SUBST(LT_REVISION, 4)
AC_SUBST(LT_AGE, 40)
AC_SUBST(LT_SSL_CURRENT, 27)