gnutls 3.8.5
Zoltan Fridrich <[email protected]> Thu, 4 Apr 2024 13:20:07 +0200
| Newsgroups | gmane.network.gnutls.general |
|---|---|
| Message-ID | <[email protected]> |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============2662990009119076739== Content-Language: en-US Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------Zr7c0nEHScN4BMgTmnx8wJ5i" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------Zr7c0nEHScN4BMgTmnx8wJ5i Content-Type: multipart/mixed; boundary="------------2J0Whyumrh6Grjs3NxjzHfJO"; protected-headers="v1" From: Zoltan Fridrich <[email protected]> To: [email protected] Message-ID: <[email protected]> Subject: gnutls 3.8.5 --------------2J0Whyumrh6Grjs3NxjzHfJO Content-Type: multipart/mixed; boundary="------------0v5en6woSSVFsaEcAsi2gFI9" --------------0v5en6woSSVFsaEcAsi2gFI9 Content-Type: multipart/alternative; boundary="------------IQFe7u1I1bhbas0ElHKrZxbk" --------------IQFe7u1I1bhbas0ElHKrZxbk Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 SGVsbG8sDQoNCldlIGhhdmUganVzdCByZWxlYXNlZCBnbnV0bHMtMy44LjUuIFRoaXMgaXMg YSBidWcgZml4IGFuZCBlbmhhbmNlbWVudCANCnJlbGVhc2Ugb24gdGhlIDMuOC54IGJyYW5j aC4NCg0KV2Ugd291bGQgbGlrZSB0byB0aGFuayBldmVyeW9uZSB3aG8gY29udHJpYnV0ZWQg aW4gdGhpcyByZWxlYXNlOg0KQWx5c3NhIFJvc3MsIERhaWtpIFVlbm8gYW5kIFpvbHRhbiBG cmlkcmljaA0KDQoNClRoZSBkZXRhaWxlZCBsaXN0IG9mIGNoYW5nZXMgZm9sbG93czoNCg0K KiBWZXJzaW9uIDMuOC41IChyZWxlYXNlZCAyMDI0LTA0LTA0KQ0KDQoqKiBsaWJnbnV0bHM6 IER1ZSB0byBtYWpvcml0eSBvZiB1c2FnZXMgYW5kIGltcGxlbWVudGF0aW9ucyBvZiBSU0Eg DQpkZWNyeXB0aW9uIHdpdGggUEtDUyMxIHYxLjUgcGFkZGluZyBiZWluZyBpbmNvcnJlY3Qs IGxlYXZpbmcgdGhlbSANCnZ1bG5lcmFibGUgdG8gTWFydmluIGF0dGFjaywgdGhlIFJTQUVT LVBLQ1MxLXYxXzUgaXMgYmVpbmcgZGVwcmVjYXRlZCANCihlbmNyeXB0aW9uIGFuZCBkZWNy eXB0aW9uKSBhbmQgd2lsbCBiZSBkaXNhYmxlZCBpbiB0aGUgZnV0dXJlLiBBIG5ldyANCm9w dGlvbiBgYWxsb3ctcnNhLXBrY3MxLWVuY3J5cHRgIGhhcyBiZWVuIGFkZGVkIGludG8gdGhl IHN5c3RlbS13aWRlIA0KbGlicmFyeSBjb25maWd1cmF0aW9uIHdoaWNoIGFsbG93cyB0byBl bmFibGUvZGlzYWJsZSB0aGUgDQpSU0FFUy1QS0NTMS12MV81LiBDdXJyZW50bHksIHRoZSBS U0FFUy1QS0NTMS12MV81IGlzIGVuYWJsZWQgYnkgZGVmYXVsdC4NCg0KKiogbGliZ251dGxz OiBBZGRlZCBzdXBwb3J0IGZvciBSSVBFTUQxNjAgYW5kIFBCRVMxLURFUy1TSEExIGZvciAN CmJhY2t3YXJkIGNvbXBhdGliaWxpdHkgd2l0aCBHQ1IuDQoNCioqIGxpYmdudXRsczogQSBj b3VwbGUgb2YgbWVtb3J5IHJlbGF0ZWQgaXNzdWVzIGhhdmUgYmVlbiBmaXhlZCBpbiBSU0Eg DQpQS0NTIzEgdjEuNSBkZWNyeXB0aW9uIGVycm9yIGhhbmRsaW5nIGFuZCBkZXRlcm1pbmlz dGljIEVDRFNBIHdpdGggDQplYXJsaWVyIHZlcnNpb25zIG9mIEdNUC4gVGhlc2Ugd2VyZSBh IHJlZ3Jlc3Npb24gaW50cm9kdWNlZCBpbiB0aGUgMy44LjQgDQpyZWxlYXNlLiBTZWUgIzE1 MzUgYW5kICExODI3Lg0KDQoqKiBidWlsZDogRml4ZWQgYSBidWcgd2hlcmUgYnVpbGRpbmcg Z251dGxzIHN0YXRpY2FsbHkgZmFpbGVkIGR1ZSB0byBhIA0KZHVwbGljYXRlIGRlZmluaXRp b24gb2YgbmV0dGxlX3JzYV9jb21wdXRlX3Jvb3RfdHIoKS4NCg0KKiogQVBJIGFuZCBBQkkg bW9kaWZpY2F0aW9uczoNCkdOVVRMU19QS0NTX1BCRVMxX0RFU19TSEExOiBOZXcgZW51bSBt ZW1iZXIgb2YgZ251dGxzX3BrY3NfZW5jcnlwdF9mbGFnc190DQoNCg0KR2V0dGluZyB0aGUg U29mdHdhcmUNCj09PT09PT09PT09PT09PT0NCkdudVRMUyBtYXkgYmUgZG93bmxvYWRlZCBk aXJlY3RseSBmcm9tDQpodHRwczovL3d3dy5nbnVwZy5vcmcvZnRwL2djcnlwdC8gPGh0dHBz Oi8vd3d3LmdudXBnLm9yZy9mdHAvZ2NyeXB0Lz4NCkEgbGlzdCBvZiBHbnVUTFMgbWlycm9y cyBjYW4gYmUgZm91bmQgYXQNCmh0dHA6Ly93d3cuZ251dGxzLm9yZy9kb3dubG9hZC5odG1s IDxodHRwOi8vd3d3LmdudXRscy5vcmcvZG93bmxvYWQuaHRtbD4NCg0KSGVyZSBhcmUgdGhl IFhaIGNvbXByZXNzZWQgc291cmNlczoNCmh0dHBzOi8vd3d3LmdudXBnLm9yZy9mdHAvZ2Ny eXB0L2dudXRscy92My44L2dudXRscy0zLjguNS50YXIueHogDQo8aHR0cHM6Ly93d3cuZ251 cGcub3JnL2Z0cC9nY3J5cHQvZ251dGxzL3YzLjgvZ251dGxzLTMuOC41LnRhci54ej4NCg0K SGVyZSBhcmUgT3BlblBHUCBkZXRhY2hlZCBzaWduYXR1cmVzIHNpZ25lZCB1c2luZyBrZXk6 DQo1RDQ2Q0IwRjc2MzQwNUE3MDUzNTU2RjQ3QTc1QTY0OEIzRjkyMjBDDQpodHRwczovL3d3 dy5nbnVwZy5vcmcvZnRwL2djcnlwdC9nbnV0bHMvdjMuOC9nbnV0bHMtMy44LjUudGFyLnh6 LnNpZyANCjxodHRwczovL3d3dy5nbnVwZy5vcmcvZnRwL2djcnlwdC9nbnV0bHMvdjMuOC9n bnV0bHMtMy44LjUudGFyLnh6LnNpZz4NCg0KTm90ZSB0aGF0IGl0IGhhcyBiZWVuIHNpZ25l ZCB3aXRoIG15IG9wZW5wZ3Aga2V5Og0KcHViIMKgIGVkMjU1MTkgMjAyMS0xMi0yMyBbU0Nd IFtleHBpcmVzOiAyMDI3LTAxLTAxXQ0KIMKgIMKgIMKgIDVENDZDQjBGNzYzNDA1QTcwNTM1 NTZGNDdBNzVBNjQ4QjNGOTIyMEMNCnVpZCDCoCDCoCDCoCDCoCDCoCBbdWx0aW1hdGVdIFpv bHRhbiBGcmlkcmljaCA8emZyaWRyaWNAcmVkaGF0LmNvbT4NCnN1YiDCoCBjdjI1NTE5IDIw MjEtMTItMjMgW0VdIFtleHBpcmVzOiAyMDI3LTAxLTAxXQ0KDQpSZWdhcmRzLA0KWm9sdGFu DQoNCg== --------------IQFe7u1I1bhbas0ElHKrZxbk Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <!DOCTYPE html> <html> <head> <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF= -8"> </head> <body> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div dir=3D"ltr"> <div><font face=3D"monospace">Hello,</font></div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">We have just released gnutls-3.8.5. This is a bug fix and enhancement release on the 3.8.x branch.</font></div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">We would like to thank everyone= who contributed in this release:</font></div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">Alyssa Ross, Daiki Ueno and Zoltan Fridrich<br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">The detailed list of changes follows:</font> </div> </div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= "><br> </span></span></font></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= ">* Version 3.8.5 (released 2024-04-04)</span></span></font= ></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= "><br> </span></span></font></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= "></span></span></font> <font face=3D"monospace"><span><span class=3D"">** libgnutls:= Due to majority of usages and implementations of</span>= </span> <span><span class=3D""> RSA decryption with PKCS#1 v1.5 padding being incorrect,</span></span> <span><span class=3D""> leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5</span></span> <span><span class=3D""> is being deprecated (encryption and= decryption) and will be</span></span> <span><span class=3D""> disabled in the future. A new optio= n `allow-rsa-pkcs1-encrypt`</span></span> <span><span class=3D""> has been added into the system-wide= library configuration which</span></span> <span><span class=3D""> allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the</span></span> <span><span class=3D""> RSAES-PKCS1-v1_5 is enabled by default.</span></span> <span><span class=3D""></span></span><br> </font></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= "><br> </span></span></font></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= ">** libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for</span></span> <span><span class=3D""> backward compatibility with GCR.</s= pan></span> <span><span class=3D""></span></span><br> </font></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= "><br> </span></span></font></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= ">** libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1</span></span> <span><span class=3D""> v1.5 decryption error handling and deterministic ECDSA with earlier</span></span> <span><span class=3D""> versions of GMP. These were a regression introduced in the 3.8.4</span></span> <span><span class=3D""> release. See #1535 and !1827.</span= ></span> <span><span class=3D""></span></span><br> </font></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= "><br> </span></span></font></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= ">** build: Fixed a bug where building gnutls statically failed due</span></span> <span><span class=3D""> to a duplicate definition of nettle_rsa_compute_root_tr().</span></span><br> </font></div> <div dir=3D"ltr"><font face=3D"monospace"><br> </font></div> <div dir=3D"ltr"><font face=3D"monospace"> <span><span class=3D"">** API and ABI modifications:</span>= </span><br> </font></div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D"= ">GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t</span></= span></font><br> <div><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace"><br> </font></div> <div><font face=3D"monospace">Getting the Software<br> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</font></= div> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">GnuTLS may be downloa= ded directly from <br> </font> <font face=3D"monospace"><a href=3D"https://www.gnupg.org/ftp/gcrypt/" target=3D"_bla= nk" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.gnupg.= org/ftp/gcrypt/&source=3Dgmail&ust=3D1652432968350000&usg=3DA= OvVaw3njjTg_V6cIskMjpkmAg7X">https://www.gnupg.org/ftp/<wbr>gcrypt/</a> <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">A list of GnuTLS mirr= ors can be found at</font></div> <font face=3D"monospace"> </font> <div dir=3D"ltr"> <font face=3D"monospace"><a href=3D"http://www.gnutls.org/download.html" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttp://www.gnutls.= org/download.html&source=3Dgmail&ust=3D1652432968350000&usg=3D= AOvVaw1J-wc5GojHL2n94ox7b_09">http://www.gnutls.org/<wbr>download.html</a= > <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"> Here are the XZ compressed sources:<br> </font> <font face=3D"monospace"><a href=3D"https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.5.tar.xz"= target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.gnupg.= org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz&source=3Dgmail&ust= =3D1652432968350000&usg=3DAOvVaw3ybeveKudYmPlqI6U8OXIO" moz-do-not-send=3D"true">https://www.gnupg.org/ftp/<wbr>g= crypt/gnutls/v3.8/gnutls-3.8.<wbr>5.tar.xz</a> <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">Here are OpenPGP detached signatures signed using key:</font></div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">5D46CB0F763405A705355= 6F47A75A6</font><wbr><font face=3D"monospace">48B3F9220C</font></div> <font face=3D"monospace"> </font> <font face=3D"monospace"> </f= ont> <div dir=3D"ltr"><font face=3D"monospace"><a href=3D"https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.5.tar.xz.= sig" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.gnupg.= org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz.sig&source=3Dgmail&= ;ust=3D1652432968350000&usg=3DAOvVaw1J49sWnCfoI9B3ou7WbdQ6" moz-do-not-send=3D"true">https://www.gnupg.org/ftp/<wbr>g= crypt/gnutls/v3.8/gnutls-3.8.<wbr>5.tar.xz.sig</a> <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"> Note that it has bee= n signed with my openpgp key:<br> pub =C2=A0 ed25519 2021-12-23 [SC] [expires: 2027-01-01]<br= > =C2=A0 =C2=A0 =C2=A0 5D46CB0F763405A7053556F47A75A6</font><= wbr><font face=3D"monospace">48B3F9220C<br> uid =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 [ultimate] Zoltan Fr= idrich <<a href=3D"mailto:[email protected]" target=3D"_blank" class=3D"moz-txt-link-freetext">[email protected]</a>&g= t;<br> sub =C2=A0 cv25519 2021-12-23 [E] [expires: 2027-01-01]</fo= nt><font face=3D"monospace"><br> </font> <font face=3D"monospace"><br> Regards,<br> Zoltan</font></div> </div> </div> </div> <p></p> </body> </html> --------------IQFe7u1I1bhbas0ElHKrZxbk-- --------------0v5en6woSSVFsaEcAsi2gFI9 Content-Type: application/pgp-keys; name="OpenPGP_0x7A75A648B3F9220C.asc" Content-Disposition: attachment; filename="OpenPGP_0x7A75A648B3F9220C.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xjMEYcRaoxYJKwYBBAHaRw8BAQdA5U8Cb4ZMYCjuAa6tqNKbRxXzycS2iLvNzWki bGD2fe7NJVpvbHRhbiBGcmlkcmljaCA8emZyaWRyaWNAcmVkaGF0LmNvbT7CmgQT FgoAQhYhBF1Gyw92NAWnBTVW9Hp1pkiz+SIMBQJhxFqjAhsDBQkDwmcABQsJCAcC AyICAQYVCgkICwIEFgIDAQIeBwIXgAAKCRB6daZIs/kiDGnYAQCiU94/eIspZzzx V17pylayAEv23s5uKvlGo1Ml1ySrZAEA8Q2rACBmdTpUfoW3LG3MJI0l1XP3kMEu WDBiM84D2gLCmgQTFgoAQgIbAwULCQgHAgMiAgEGFQoJCAsCBBYCAwECHgcCF4AW IQRdRssPdjQFpwU1VvR6daZIs/kiDAUCZZQM4wUJCXNMwAAKCRB6daZIs/kiDBq0 AQD4kutiBvEtpeI5oHE5am/JgQUbUNQ8hGiHeJ+epRc5NQEA0xzJPYCIlvZ4jgf7 K7RiKkqjzozOLwunGummhMd1vQ3OOARhxFqjEgorBgEEAZdVAQUBAQdAxKg6y4A6 9qT7doTni8/zKuKyQKXEORZTCNxkcnz3dXoDAQgHwn4EGBYKACYWIQRdRssPdjQF pwU1VvR6daZIs/kiDAUCYcRaowIbDAUJA8JnAAAKCRB6daZIs/kiDM/EAP0VN87W waMcNwZcyocG/B9f419IojEx70PzMIBBlPctAgD/R/qamAlnggADzmS1PCF8+2W6 Erc+HV2W/u2+wVJu7w3CfgQYFgoAJgIbDBYhBF1Gyw92NAWnBTVW9Hp1pkiz+SIM BQJllAvfBQkJc0u8AAoJEHp1pkiz+SIMK10BALqn4HbqDvYIteOrrGZouqzV+LVq 7I9b9Kc1Fttpb1SXAP9SnmWSn6vafl3vi+Phjjec5GmKlviRHeY/mDhJlqQhAg=3D=3D =3D+8Rn -----END PGP PUBLIC KEY BLOCK----- --------------0v5en6woSSVFsaEcAsi2gFI9-- --------------2J0Whyumrh6Grjs3NxjzHfJO-- --------------Zr7c0nEHScN4BMgTmnx8wJ5i Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wnsEABYIACMWIQRdRssPdjQFpwU1VvR6daZIs/kiDAUCZg6M5wUDAAAAAAAKCRB6daZIs/kiDADl AQDwsTrKLJeNhgsZDGsEE7+OBgoczvSePHHCSwtqmRec6QD/fde3IAkXmcfrOrBUspb7NZahJv8j 78Tg3N8B0g4bfw4= =wvjW -----END PGP SIGNATURE----- --------------Zr7c0nEHScN4BMgTmnx8wJ5i-- --===============2662990009119076739== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Gnutls-help mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnutls-help --===============2662990009119076739==--