Release 3.8.8

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/NEWS b/NEWS
index d5b30b0aa853430011c8ea5a2004a474b0794cdc..0eee62429c6efab48c6aaa2792323cead87f7db6 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,34 @@ Copyright (C) 2000-2016 Free Software Foundation, Inc.
 Copyright (C) 2013-2019 Nikos Mavrogiannopoulos
 See the end for copying conditions.
 
+* Version 3.8.8 (released 2024-11-05)
+
+** libgnutls: Experimental support for X25519MLKEM768 and SecP256r1MLKEM768 key exchange in TLS 1.3
+   The support for post-quantum key exchanges has been extended to
+   cover the final standard of ML-KEM, following
+   draft-kwiatkowski-tls-ecdhe-mlkem. The minimum supported version of
+   liboqs is bumped to 0.11.0.
+
+** libgnutls: All records included in an OCSP response are now checked in TLS
+   Previously, when multiple records are provided in a single OCSP
+   response, only the first record was considered; now all those
+   records are examined until the server certificate matches.
+
+** libgnutls: Handling of malformed compress_certificate extension is now more standard compliant
+   The server behavior of receiving a malformed compress_certificate
+   extension now more strictly follows RFC 8879; return
+   illegal_parameter alert instead of bad_certificate, as well as
+   overlong extension data is properly rejected.
+
+** build: More flexible library linking options for compression libraries, TPM, and liboqs support
+   The configure options, --with-zstd, --with-brotli, --with-zlib,
+   --with-tpm2, and --with-liboqs now take 4 states:
+   yes/link/dlopen/no, to specify how the libraries are linked or
+   loaded.
+
+** API and ABI modifications:
+No changes since last version.
+
 * Version 3.8.7 (released 2024-08-15)
 
 ** libgnutls: New configure option to compile out DSA support

diff --git a/configure.ac b/configure.ac
index 0564c6d62b0db8938282203c4f0f174b687439dc..65c75646933ba699e907de25795e8d0f47a2af0b 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -21,7 +21,7 @@ dnl Process this file with autoconf to produce a configure script.
 AC_PREREQ(2.64)
 
 dnl when updating version also update LT_REVISION in m4/hooks.m4
-AC_INIT([GnuTLS], [3.8.7], [bugs@gnutls.org])
+AC_INIT([GnuTLS], [3.8.8], [bugs@gnutls.org])
 AC_CONFIG_AUX_DIR([build-aux])
 AC_CONFIG_MACRO_DIRS([m4 src/gl/m4 lib/unistring/m4])
 AC_CANONICAL_HOST

diff --git a/m4/hooks.m4 b/m4/hooks.m4
index a943fdf06a373e485bb298758a66919108b6e8f2..efba6e21a1cbc70197389c818208f415010924aa 100644 (file)
--- a/m4/hooks.m4
+++ b/m4/hooks.m4
@@ -41,7 +41,7 @@ AC_DEFUN([LIBGNUTLS_HOOKS],
   #
   # Interfaces removed:                           AGE=0 (+bump all symbol versions in .map)
   AC_SUBST(LT_CURRENT, 70)
-  AC_SUBST(LT_REVISION, 1)
+  AC_SUBST(LT_REVISION, 2)
   AC_SUBST(LT_AGE, 40)
 
   AC_SUBST(LT_SSL_CURRENT, 27)