Release 3.8.3

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/NEWS b/NEWS
index dabb4441f8e756217e01c5f082e92dc7c9ba1be2..5e32a3bf7a791193dd4fe1874a21e4f88885ec66 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,22 @@ Copyright (C) 2000-2016 Free Software Foundation, Inc.
 Copyright (C) 2013-2019 Nikos Mavrogiannopoulos
 See the end for copying conditions.
 
+* Version 3.8.3 (released 2024-01-16)
+
+** libgnutls: Fix more timing side-channel inside RSA-PSK key exchange
+   [GNUTLS-SA-2024-01-14, CVSS: medium] [CVE-2024-0553]
+
+** libgnutls: Fix assertion failure when verifying a certificate chain with a
+   cycle of cross signatures
+   [GNUTLS-SA-2024-01-09, CVSS: medium] [CVE-2024-0567]
+
+** libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 token
+   certtool was unable to handle Ed25519 keys generated on PKCS#11
+   with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2.
+
+** API and ABI modifications:
+No changes since last version.
+
 * Version 3.8.2 (released 2023-11-14)
 
 ** libgnutls: Fix timing side-channel inside RSA-PSK key exchange.

diff --git a/configure.ac b/configure.ac
index 4c898b35a3b7e98d3e5ef377e487fb38cf6be238..d6f283a6ee7ed6d505c31832daaa6fe78100f6b6 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -21,7 +21,7 @@ dnl Process this file with autoconf to produce a configure script.
 AC_PREREQ(2.64)
 
 dnl when updating version also update LT_REVISION in m4/hooks.m4
-AC_INIT([GnuTLS], [3.8.2], [bugs@gnutls.org])
+AC_INIT([GnuTLS], [3.8.3], [bugs@gnutls.org])
 AC_CONFIG_AUX_DIR([build-aux])
 AC_CONFIG_MACRO_DIRS([m4 src/gl/m4 lib/unistring/m4])
 AC_CANONICAL_HOST

diff --git a/m4/hooks.m4 b/m4/hooks.m4
index f4238bac3492ac0dfec5f1858a67c439b6d6c521..d962cccf1d82501527ea3f4b3306fe66d7f2bed8 100644 (file)
--- a/m4/hooks.m4
+++ b/m4/hooks.m4
@@ -41,7 +41,7 @@ AC_DEFUN([LIBGNUTLS_HOOKS],
   #
   # Interfaces removed:                           AGE=0 (+bump all symbol versions in .map)
   AC_SUBST(LT_CURRENT, 67)
-  AC_SUBST(LT_REVISION, 0)
+  AC_SUBST(LT_REVISION, 1)
   AC_SUBST(LT_AGE, 37)
 
   AC_SUBST(LT_SSL_CURRENT, 27)