Release 3.8.2

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>

diff --git a/NEWS b/NEWS
index f8a7b9a702ed57ab082df4f2cea688864e6ff5ed..dabb4441f8e756217e01c5f082e92dc7c9ba1be2 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,7 +5,10 @@ Copyright (C) 2000-2016 Free Software Foundation, Inc.
 Copyright (C) 2013-2019 Nikos Mavrogiannopoulos
 See the end for copying conditions.
 
-* Version 3.8.2 (unreleased)
+* Version 3.8.2 (released 2023-11-14)
+
+** libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
+   [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
 
 ** libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were

diff --git a/configure.ac b/configure.ac
index f81d93edc0af3f6d1d797896abbed54bb050a234..4c898b35a3b7e98d3e5ef377e487fb38cf6be238 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -21,7 +21,7 @@ dnl Process this file with autoconf to produce a configure script.
 AC_PREREQ(2.64)
 
 dnl when updating version also update LT_REVISION in m4/hooks.m4
-AC_INIT([GnuTLS], [3.8.1], [bugs@gnutls.org])
+AC_INIT([GnuTLS], [3.8.2], [bugs@gnutls.org])
 AC_CONFIG_AUX_DIR([build-aux])
 AC_CONFIG_MACRO_DIRS([m4 src/gl/m4 lib/unistring/m4])
 AC_CANONICAL_HOST

diff --git a/devel/abi-dump b/devel/abi-dump
index 36a33a5e38fbc648718ae999608f5112d72aa1a8..237f0723ef5f4aa47f299b16cc26d36839281b1f 160000 (submodule)
--- a/devel/abi-dump
+++ b/devel/abi-dump
@@ -1 +1 @@
-Subproject commit 36a33a5e38fbc648718ae999608f5112d72aa1a8
+Subproject commit 237f0723ef5f4aa47f299b16cc26d36839281b1f

diff --git a/devel/libgnutls.abignore b/devel/libgnutls.abignore
index d22aec8496595709b5ba20e8a6fa79af56cd02eb..c19dce38e11a1c763a5d7bb7a17888e269dc61bf 100644 (file)
--- a/devel/libgnutls.abignore
+++ b/devel/libgnutls.abignore
@@ -70,24 +70,3 @@ name = drbg_aes_reseed
 
 # The following should be removed in the new release, after updating the
 # abi-dump repository:
-[suppress_function]
-name = gnutls_pubkey_import_dh_raw
-
-[suppress_function]
-name = gnutls_privkey_import_dh_raw
-
-[suppress_function]
-name = gnutls_pubkey_export_dh_raw
-
-[suppress_function]
-name = gnutls_privkey_export_dh_raw
-
-[suppress_function]
-name = gnutls_x509_privkey_import_dh_raw
-
-[suppress_function]
-name = gnutls_privkey_derive_secret
-
-[suppress_type]
-name = gnutls_cipher_algorithm_t
-changed_enumerators = GNUTLS_CIPHER_AES_128_SIV_GCM, GNUTLS_CIPHER_AES_256_SIV_GCM

diff --git a/m4/hooks.m4 b/m4/hooks.m4
index 013d3d243ed73a14f291c9dcbc70bde20254b5b1..f4238bac3492ac0dfec5f1858a67c439b6d6c521 100644 (file)
--- a/m4/hooks.m4
+++ b/m4/hooks.m4
@@ -40,9 +40,9 @@ AC_DEFUN([LIBGNUTLS_HOOKS],
   #     in CONTRIBUTION.md for more info.
   #
   # Interfaces removed:                           AGE=0 (+bump all symbol versions in .map)
-  AC_SUBST(LT_CURRENT, 66)
+  AC_SUBST(LT_CURRENT, 67)
   AC_SUBST(LT_REVISION, 0)
-  AC_SUBST(LT_AGE, 36)
+  AC_SUBST(LT_AGE, 37)
 
   AC_SUBST(LT_SSL_CURRENT, 27)
   AC_SUBST(LT_SSL_REVISION, 2)