gnutls 3.8.4
Zoltan Fridrich <[email protected]> Wed, 20 Mar 2024 10:35:16 +0100
| Newsgroups | gmane.network.gnutls.general |
|---|---|
| Message-ID | <[email protected]> |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============4209001598983226822== Content-Language: en-US Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------8TI8KfRQ6Av7kd0g4e6yusaW" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------8TI8KfRQ6Av7kd0g4e6yusaW Content-Type: multipart/mixed; boundary="------------oqRHf2z2DI0cekKK24axggQm"; protected-headers="v1" From: Zoltan Fridrich <[email protected]> To: [email protected] Message-ID: <[email protected]> Subject: gnutls 3.8.4 --------------oqRHf2z2DI0cekKK24axggQm Content-Type: multipart/mixed; boundary="------------nQdovxD7dB8VtSQE5nrxHGgX" --------------nQdovxD7dB8VtSQE5nrxHGgX Content-Type: multipart/alternative; boundary="------------jy0m3krxpfrzczm95d2qabbF" --------------jy0m3krxpfrzczm95d2qabbF Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 SGVsbG8sDQoNCldlIGhhdmUganVzdCByZWxlYXNlZCBnbnV0bHMtMy44LjQuIFRoaXMgaXMg YSBidWcgZml4IGFuZCBlbmhhbmNlbWVudCANCnJlbGVhc2Ugb24gdGhlIDMuOC54IGJyYW5j aC4NCg0KV2Ugd291bGQgbGlrZSB0byB0aGFuayBldmVyeW9uZSB3aG8gY29udHJpYnV0ZWQg aW4gdGhpcyByZWxlYXNlOg0KQXZpbmFzaCBTb25hd2FuZSwgWGluIExvbmcsIEFsZXhhbmRl ciBTb3NlZGtpbiwgU2FoaWwgU2lkZGlxLCBSYW1lc2ggDQpBZGhpa2FyaSwgU3RhbmlzbGF2 IFppZGVrLCBEbWl0cmkgUGFwYWRvcG91bG9zIE9yZmFub3MsIERhaWtpIFVlbm8gYW5kIA0K Wm9sdGFuIEZyaWRyaWNoDQoNCg0KVGhlIGRldGFpbGVkIGxpc3Qgb2YgY2hhbmdlcyBmb2xs b3dzOg0KDQoqIFZlcnNpb24gMy44LjQgKHJlbGVhc2VkIDIwMjQtMDMtMTgpDQoNCioqIGxp YmdudXRsczogUlNBLU9BRVAgZW5jcnlwdGlvbiBzY2hlbWUgaXMgbm93IHN1cHBvcnRlZCBU byB1c2UgaXQgd2l0aCANCmFuIHVucmVzdHJpY3RlZCBSU0EgcHJpdmF0ZSBrZXksIG9uZSB3 b3VsZCBuZWVkIHRvIGluaXRpYWxpemUgYSANCmdudXRsc194NTA5X3Nwa2lfdCBvYmplY3Qg d2l0aCBuZWNlc3NhcnkgcGFyYW1ldGVycyBmb3IgUlNBLU9BRVAgYW5kIA0KYXR0YWNoIGl0 IHRvIHRoZSBwcml2YXRlIGtleS4gSXQgaXMgYWxzbyBwb3NzaWJsZSB0byBpbXBvcnQgcmVz dHJpY3RlZCANCnByaXZhdGUga2V5cyBpZiB0aGV5IGFyZSBzdG9yZWQgaW4gUEtDUyM4IGZv cm1hdC4NCg0KKiogbGliZ251dGxzOiBGaXggc2lkZS1jaGFubmVsIGluIHRoZSBkZXRlcm1p bmlzdGljIEVDRFNBLiBSZXBvcnRlZCBieSANCkdlb3JnZSBQYW50ZWxha2lzICgjMTUxNiku IFtHTlVUTFMtU0EtMjAyMy0xMi0wNCwgQ1ZTUzogbWVkaXVtXSANCltDVkUtMjAyNC0yODgz NF0NCg0KKiogbGliZ251dGxzOiBGaXhlZCBhIGJ1ZyB3aGVyZSBjZXJ0dG9vbCBjcmFzaGVk IHdoZW4gdmVyaWZ5aW5nIGEgDQpjZXJ0aWZpY2F0ZSBjaGFpbiB3aXRoIG1vcmUgdGhhbiAx NiBjZXJ0aWZpY2F0ZXMuIFJlcG9ydGVkIGJ5IFdpbGxpYW0gDQpXb29kcnVmZiAoIzE1MjUp IGFuZCB5aXhpYW5nemhpa2UgKCMxNTI3KS4gW0dOVVRMUy1TQS0yMDI0LTAxLTIzLCBDVlNT OiANCm1lZGl1bV0gW0NWRS0yMDI0LTI4ODM1XQ0KDQoqKiBsaWJnbnV0bHM6IENvbXByZXNz aW9uIGxpYnJhcmllcyBhcmUgbm93IGxvYWRlZCBkeW5hbWljYWxseSBhcyBuZWVkZWQgDQpp bnN0ZWFkIG9mIGFsbCBiZWluZyBsb2FkZWQgZHVyaW5nIGdudXRscyBsaWJyYXJ5IGluaXRp YWxpemF0aW9uLiBBcyBhIA0KcmVzdWx0LCB0aGUgbGlicmFyeSBpbml0aWFsaXphdGlvbiBz aG91bGQgYmUgZmFzdGVyLg0KDQoqKiBidWlsZDogVGhlIGdudXRscyBsaWJyYXJ5IGNhbiBu b3cgYmUgbGlua2VkIHdpdGggdGhlIHN0YXRpYyBsaWJyYXJ5IA0Kb2YgR01QLiBOb3RlIHRo YXQgaW4gb3JkZXIgZm9yIHRoaXMgdG8gd29yayBsaWJnbXAuYSBuZWVkcyB0byBiZSANCmNv bXBpbGVkIHdpdGggLWZQSUMgYW5kIGxpYmhvZ3dlZWQgaW4gTmV0dGxlIGFsc28gaGFzIHRv IGJlIGxpbmtlZCB0byANCnRoZSBzdGF0aWMgbGlicmFyeSBvZiBHTVAuIFRoaXMgY2FuIGJl IHVzZWQgdG8gcHJldmVudCBjdXN0b20gbWVtb3J5IA0KYWxsb2NhdG9ycyBmcm9tIGJlaW5n IG92ZXJyaWRlbiBieSBvdGhlciBhcHBsaWNhdGlvbnMuDQoNCioqIEFQSSBhbmQgQUJJIG1v ZGlmaWNhdGlvbnM6DQpnbnV0bHNfeDUwOV9zcGtpX2dldF9yc2Ffb2FlcF9wYXJhbXM6IE5l dyBmdW5jdGlvbi4NCmdudXRsc194NTA5X3Nwa2lfc2V0X3JzYV9vYWVwX3BhcmFtczogTmV3 IGZ1bmN0aW9uLg0KR05VVExTX1BLX1JTQV9PQUVQOiBOZXcgZW51bSBtZW1iZXIgb2YgZ251 dGxzX3BrX2FsZ29yaXRobV90Lg0KDQoNCkdldHRpbmcgdGhlIFNvZnR3YXJlDQo9PT09PT09 PT09PT09PT09DQpHbnVUTFMgbWF5IGJlIGRvd25sb2FkZWQgZGlyZWN0bHkgZnJvbQ0KaHR0 cHM6Ly93d3cuZ251cGcub3JnL2Z0cC9nY3J5cHQvIDxodHRwczovL3d3dy5nbnVwZy5vcmcv ZnRwL2djcnlwdC8+DQpBIGxpc3Qgb2YgR251VExTIG1pcnJvcnMgY2FuIGJlIGZvdW5kIGF0 DQpodHRwOi8vd3d3LmdudXRscy5vcmcvZG93bmxvYWQuaHRtbCA8aHR0cDovL3d3dy5nbnV0 bHMub3JnL2Rvd25sb2FkLmh0bWw+DQoNCkhlcmUgYXJlIHRoZSBYWiBjb21wcmVzc2VkIHNv dXJjZXM6DQpodHRwczovL3d3dy5nbnVwZy5vcmcvZnRwL2djcnlwdC9nbnV0bHMvdjMuOC9n bnV0bHMtMy44LjQudGFyLnh6IA0KPGh0dHBzOi8vd3d3LmdudXBnLm9yZy9mdHAvZ2NyeXB0 L2dudXRscy92My44L2dudXRscy0zLjguNC50YXIueHo+DQoNCkhlcmUgYXJlIE9wZW5QR1Ag ZGV0YWNoZWQgc2lnbmF0dXJlcyBzaWduZWQgdXNpbmcga2V5Og0KNUQ0NkNCMEY3NjM0MDVB NzA1MzU1NkY0N0E3NUE2NDhCM0Y5MjIwQw0KaHR0cHM6Ly93d3cuZ251cGcub3JnL2Z0cC9n Y3J5cHQvZ251dGxzL3YzLjgvZ251dGxzLTMuOC40LnRhci54ei5zaWcgDQo8aHR0cHM6Ly93 d3cuZ251cGcub3JnL2Z0cC9nY3J5cHQvZ251dGxzL3YzLjgvZ251dGxzLTMuOC40LnRhci54 ei5zaWc+DQoNCk5vdGUgdGhhdCBpdCBoYXMgYmVlbiBzaWduZWQgd2l0aCBteSBvcGVucGdw IGtleToNCnB1YiDCoCBlZDI1NTE5IDIwMjEtMTItMjMgW1NDXSBbZXhwaXJlczogMjAyNy0w MS0wMV0NCiDCoCDCoCDCoCA1RDQ2Q0IwRjc2MzQwNUE3MDUzNTU2RjQ3QTc1QTY0OEIzRjky MjBDDQp1aWQgwqAgwqAgwqAgwqAgwqAgW3VsdGltYXRlXSBab2x0YW4gRnJpZHJpY2ggPHpm cmlkcmljQHJlZGhhdC5jb20+DQpzdWIgwqAgY3YyNTUxOSAyMDIxLTEyLTIzIFtFXSBbZXhw aXJlczogMjAyNy0wMS0wMV0NCg0KUmVnYXJkcywNClpvbHRhbg0KDQo= --------------jy0m3krxpfrzczm95d2qabbF Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF= -8"> </head> <body> <p> </p> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div dir=3D"ltr"> <div><font face=3D"monospace">Hello,</font></div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">We have just released gnutls-3.8.4. This is a bug fix and enhancement release on the 3.8.x branch.</font></div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">We would like to thank everyone who contributed in this release:</font></div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">Avinash Sonawane, Xin Long, Alexander Sosedkin, Sahil Siddiq, Ramesh Adhikari, Stanislav Zidek, Dmitri Papadopoulos Orfanos, Daiki Ueno and Zoltan Fridrich<br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">The detailed list of changes follows:</font> </div> </div> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> <div><font face=3D"monospace">* Version 3.8.4 (released 2024-03-18)</font> </div> <div> <font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace">** libgnutls: RSA-OAEP encryption scheme is now supported To use it with an unrestricted RSA private key, one would need to initialize a gnutls_x509_spki_t object with necessary parameters for RSA-OAEP and attach it to the private key. It is also possible to import restricted private keys if they are stored in PKCS#8 format.</font><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace">** libgnutls: Fix side-channe= l in the deterministic ECDSA. Reported by George Pantelakis (#1516). [GNUTLS-SA-2023-12-04, CVSS: medium] [CVE-2024-28834] <br> </font></div> <div><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace">** libgnutls: Fixed a bug where certtool crashed when verifying a certificate chain with more than 16 certificates. Reported by William Woodruff (#1525) and yixiangzhike (#1527). [GNUTLS-SA-2024-01-23, CVSS: medium] [CVE-2024-28835]<b= r> </font></div> <div><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace">** libgnutls: Compression libraries are now loaded dynamically as needed instead of all being loaded during gnutls library initialization. As a result, the library initialization should be faster.</font><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace">** build: The gnutls library can now be linked with the static library of GMP. Note that in order for this to work libgmp.a needs to be compiled with -fPIC and libhogweed in Nettle also has to be linked to the static library of GMP. This can be used to prevent custom memory allocators from being overriden by other applications.</font><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace">** API and ABI modifications:= <br> </font></div> <div><font face=3D"monospace">gnutls_x509_spki_get_rsa_oaep= _params: New function. <br> </font></div> <div><font face=3D"monospace">gnutls_x509_spki_set_rsa_oaep= _params: New function.<br> </font></div> <div><font face=3D"monospace">GNUTLS_PK_RSA_OAEP: New enum member of gnutls_pk_algorithm_t.</font> </div> <div><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace">Getting the Software<br> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</font>= </div> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">GnuTLS may be downloaded directly from <br> </font> <font face=3D"monospace"><a href=3D"https://www.gnupg.org/ftp/gcrypt/" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.gnupg.= org/ftp/gcrypt/&source=3Dgmail&ust=3D1652432968350000&usg=3DA= OvVaw3njjTg_V6cIskMjpkmAg7X">https://www.gnupg.org/ftp/<wbr>gcrypt/</a> <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">A list of GnuTLS mirrors can be found at</font></div> <font face=3D"monospace"> </font> <div dir=3D"ltr"> <font face=3D"monospace"><a href=3D"http://www.gnutls.org/download.html" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttp://www.gnutls.= org/download.html&source=3Dgmail&ust=3D1652432968350000&usg=3D= AOvVaw1J-wc5GojHL2n94ox7b_09">http://www.gnutls.org/<wbr>download.html</a= > <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"> Here are the XZ compressed sources:<br> </font> <font face=3D"monospace"><a href=3D"https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gn= utls-3.8.4.tar.xz" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.gnupg.= org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz&source=3Dgmail&ust= =3D1652432968350000&usg=3DAOvVaw3ybeveKudYmPlqI6U8OXIO" moz-do-not-send=3D"true">https://www.gnupg.org/ftp/<wbr= >gcrypt/gnutls/v3.8/gnutls-3.8.<wbr>4.tar.xz</a> <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">Here are OpenPGP detached signatures signed using key:</font></div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">5D46CB0F763405A7053= 556F47A75A6</font><wbr><font face=3D"monospace">48B3F9220C</font></div> <font face=3D"monospace"> </font> <font face=3D"monospace"> <= /font> <div dir=3D"ltr"><font face=3D"monospace"><a href=3D"https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.4.tar.xz.= sig" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.gnupg.= org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz.sig&source=3Dgmail&= ;ust=3D1652432968350000&usg=3DAOvVaw1J49sWnCfoI9B3ou7WbdQ6" moz-do-not-send=3D"true">https://www.gnupg.org/ftp/<wbr= >gcrypt/gnutls/v3.8/gnutls-3.8.<wbr>4.tar.xz.sig</a> <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"> Note that it has b= een signed with my openpgp key:<br> pub =C2=A0 ed25519 2021-12-23 [SC] [expires: 2027-01-01]<= br> =C2=A0 =C2=A0 =C2=A0 5D46CB0F763405A7053556F47A75A6</font= ><wbr><font face=3D"monospace">48B3F9220C<br> uid =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 [ultimate] Zoltan = Fridrich <<a href=3D"mailto:[email protected]" target=3D"_blank" class=3D"moz-txt-link-freetext">[email protected]</a>= ><br> sub =C2=A0 cv25519 2021-12-23 [E] [expires: 2027-01-01]</= font><font face=3D"monospace"><br> </font> <font face=3D"monospace"><br> Regards,<br> Zoltan</font></div> </div> </div> </div> <p></p> </div> </body> </html> --------------jy0m3krxpfrzczm95d2qabbF-- --------------nQdovxD7dB8VtSQE5nrxHGgX Content-Type: application/pgp-keys; name="OpenPGP_0x7A75A648B3F9220C.asc" Content-Disposition: attachment; filename="OpenPGP_0x7A75A648B3F9220C.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xjMEYcRaoxYJKwYBBAHaRw8BAQdA5U8Cb4ZMYCjuAa6tqNKbRxXzycS2iLvNzWki bGD2fe7NJVpvbHRhbiBGcmlkcmljaCA8emZyaWRyaWNAcmVkaGF0LmNvbT7CmgQT FgoAQhYhBF1Gyw92NAWnBTVW9Hp1pkiz+SIMBQJhxFqjAhsDBQkDwmcABQsJCAcC AyICAQYVCgkICwIEFgIDAQIeBwIXgAAKCRB6daZIs/kiDGnYAQCiU94/eIspZzzx V17pylayAEv23s5uKvlGo1Ml1ySrZAEA8Q2rACBmdTpUfoW3LG3MJI0l1XP3kMEu WDBiM84D2gLCmgQTFgoAQgIbAwULCQgHAgMiAgEGFQoJCAsCBBYCAwECHgcCF4AW IQRdRssPdjQFpwU1VvR6daZIs/kiDAUCZZQM4wUJCXNMwAAKCRB6daZIs/kiDBq0 AQD4kutiBvEtpeI5oHE5am/JgQUbUNQ8hGiHeJ+epRc5NQEA0xzJPYCIlvZ4jgf7 K7RiKkqjzozOLwunGummhMd1vQ3OOARhxFqjEgorBgEEAZdVAQUBAQdAxKg6y4A6 9qT7doTni8/zKuKyQKXEORZTCNxkcnz3dXoDAQgHwn4EGBYKACYWIQRdRssPdjQF pwU1VvR6daZIs/kiDAUCYcRaowIbDAUJA8JnAAAKCRB6daZIs/kiDM/EAP0VN87W waMcNwZcyocG/B9f419IojEx70PzMIBBlPctAgD/R/qamAlnggADzmS1PCF8+2W6 Erc+HV2W/u2+wVJu7w3CfgQYFgoAJgIbDBYhBF1Gyw92NAWnBTVW9Hp1pkiz+SIM BQJllAvfBQkJc0u8AAoJEHp1pkiz+SIMK10BALqn4HbqDvYIteOrrGZouqzV+LVq 7I9b9Kc1Fttpb1SXAP9SnmWSn6vafl3vi+Phjjec5GmKlviRHeY/mDhJlqQhAg=3D=3D =3D+8Rn -----END PGP PUBLIC KEY BLOCK----- --------------nQdovxD7dB8VtSQE5nrxHGgX-- --------------oqRHf2z2DI0cekKK24axggQm-- --------------8TI8KfRQ6Av7kd0g4e6yusaW Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wnsEABYIACMWIQRdRssPdjQFpwU1VvR6daZIs/kiDAUCZfqt1AUDAAAAAAAKCRB6daZIs/kiDDZK AP9CYKIFGu02eSMJH7smGFvQXtBy4Bk8+W2hbFfBsb84LAEAuxFendsGcfVvMDtXnWMMTtY9TLj4 +iEUSqax8e0HgwM= =fasU -----END PGP SIGNATURE----- --------------8TI8KfRQ6Av7kd0g4e6yusaW-- --===============4209001598983226822== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Gnutls-help mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnutls-help --===============4209001598983226822==--