gnutls 3.8.3

--===============3102622417438264848==
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha256; protocol="application/pgp-signature"

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Hello,

We have just released gnutls-3.8.3. This is a bug fix and security
release on the 3.8.x branch.

We would like to thank everyone who contributed in this release:
Clemens Lang, Daiki Ueno, Jakub Jelen, and Mark Harfouche

The detailed list of changes follows:=20

* Version 3.8.3 (released 2024-01-16)

** libgnutls: Fix more timing side-channel inside RSA-PSK key exchange
   [GNUTLS-SA-2024-01-14, CVSS: medium] [CVE-2024-0553]

** libgnutls: Fix assertion failure when verifying a certificate chain with=
 a
   cycle of cross signatures
   [GNUTLS-SA-2024-01-09, CVSS: medium] [CVE-2024-0567]

** libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 tok=
en
   certtool was unable to handle Ed25519 keys generated on PKCS#11
   with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2.

** API and ABI modifications:
No changes since last version.

Getting the Software
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
GnuTLS may be downloaded directly from=20
https://www.gnupg.org/ftp/gcrypt/=20
A list of GnuTLS mirrors can be found at
http://www.gnutls.org/download.html=20

Here are the XZ compressed sources:
https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.3.tar.xz=20

Here are OpenPGP detached signatures signed using key:
462225C3B46F34879FC8496CD605848ED7E69871
https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.3.tar.xz.sig=20

Note that it has been signed with my openpgp key:
pub   rsa4096 2009-07-23 [SC] [expires: 2026-06-29]
      462225C3B46F34879FC8496CD605848ED7E69871
uid           [ultimate] Daiki Ueno <[email protected]>
uid           [ultimate] Daiki Ueno <[email protected]>
sub   rsa4096 2010-02-04 [E]

Regards,
=2D-=20
Daiki Ueno

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=vX5s
-----END PGP SIGNATURE-----
--=-=-=--


--===============3102622417438264848==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Gnutls-help mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-help

--===============3102622417438264848==--