gnutls 3.7.11
Zoltan Fridrich <[email protected]> Mon, 27 May 2024 10:13:26 +0200
| Newsgroups | gmane.network.gnutls.general |
|---|---|
| Message-ID | <[email protected]> |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============2140075047839203180== Content-Language: en-US Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------CnoDJMga0ECSLpWPOgb04OqV" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------CnoDJMga0ECSLpWPOgb04OqV Content-Type: multipart/mixed; boundary="------------0xwy1dFZrXsX1aFOr6Wj7Ir7"; protected-headers="v1" From: Zoltan Fridrich <[email protected]> To: [email protected] Message-ID: <[email protected]> Subject: gnutls 3.7.11 --------------0xwy1dFZrXsX1aFOr6Wj7Ir7 Content-Type: multipart/mixed; boundary="------------cUgr0TvvVsU8kLByHM0Ki340" --------------cUgr0TvvVsU8kLByHM0Ki340 Content-Type: multipart/alternative; boundary="------------CLTHSb9N1ChOaDR3dCw0YCWO" --------------CLTHSb9N1ChOaDR3dCw0YCWO Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 SGVsbG8sDQoNCldlIGhhdmUganVzdCByZWxlYXNlZCBnbnV0bHMtMy43LjExLiBUaGlzIGlz IGEgYnVnIGZpeCByZWxlYXNlIG9uIHRoZSANCjMuNy54IGJyYW5jaC4NCg0KV2Ugd291bGQg bGlrZSB0byB0aGFuayBldmVyeW9uZSB3aG8gY29udHJpYnV0ZWQgaW4gdGhpcyByZWxlYXNl Og0KWGluIExvbmcsIERhaWtpIFVlbm8gYW5kIFpvbHRhbiBGcmlkcmljaA0KDQoNClRoZSBk ZXRhaWxlZCBsaXN0IG9mIGNoYW5nZXMgZm9sbG93czoNCg0KKiBWZXJzaW9uIDMuNy4xMSAo cmVsZWFzZWQgMjAyNC0wNC0xMykNCg0KKiogbGliZ251dGxzOiBGaXggc2lkZS1jaGFubmVs IGluIHRoZSBkZXRlcm1pbmlzdGljIEVDRFNBLg0KUmVwb3J0ZWQgYnkgR2VvcmdlIFBhbnRl bGFraXMgKCMxNTE2KS4NCltHTlVUTFMtU0EtMjAyMy0xMi0wNCwgQ1ZTUzogbWVkaXVtXSBb Q1ZFLTIwMjQtMjg4MzRdDQoNCioqIGxpYmdudXRsczogRml4ZWQgYSBidWcgd2hlcmUgY2Vy dHRvb2wgY3Jhc2hlZCB3aGVuIHZlcmlmeWluZyBhIA0KY2VydGlmaWNhdGUNCmNoYWluIHdp dGggbW9yZSB0aGFuIDE2IGNlcnRpZmljYXRlcy4gUmVwb3J0ZWQgYnkgV2lsbGlhbSBXb29k cnVmZiAoIzE1MjUpDQphbmQgeWl4aWFuZ3poaWtlICgjMTUyNykuDQpbR05VVExTLVNBLTIw MjQtMDEtMjMsIENWU1M6IG1lZGl1bV0gW0NWRS0yMDI0LTI4ODM1XQ0KDQoqKiBsaWJnbnV0 bHM6IEZpeCBtb3JlIHRpbWluZyBzaWRlLWNoYW5uZWwgaW5zaWRlIFJTQS1QU0sga2V5IGV4 Y2hhbmdlDQpbR05VVExTLVNBLTIwMjQtMDEtMTQsIENWU1M6IG1lZGl1bV0gW0NWRS0yMDI0 LTA1NTNdDQoNCioqIGxpYmdudXRsczogRml4IGFzc2VydGlvbiBmYWlsdXJlIHdoZW4gdmVy aWZ5aW5nIGEgY2VydGlmaWNhdGUgY2hhaW4gDQp3aXRoIGENCmN5Y2xlIG9mIGNyb3NzIHNp Z25hdHVyZXMNCltHTlVUTFMtU0EtMjAyNC0wMS0wOSwgQ1ZTUzogbWVkaXVtXSBbQ1ZFLTIw MjQtMDU2N10NCg0KKiogbGliZ251dGxzOiBGaXggdGltaW5nIHNpZGUtY2hhbm5lbCBpbnNp ZGUgUlNBLVBTSyBrZXkgZXhjaGFuZ2UuDQpbR05VVExTLVNBLTIwMjMtMTAtMjMsIENWU1M6 IG1lZGl1bV0gW0NWRS0yMDIzLTU5ODFdDQoNCioqIEFQSSBhbmQgQUJJIG1vZGlmaWNhdGlv bnM6DQpObyBjaGFuZ2VzIHNpbmNlIGxhc3QgdmVyc2lvbi4NCkdldHRpbmcgdGhlIFNvZnR3 YXJlID09PT09PT09PT09PT09PT0NCg0KR251VExTIG1heSBiZSBkb3dubG9hZGVkIGRpcmVj dGx5IGZyb20NCmh0dHBzOi8vd3d3LmdudXBnLm9yZy9mdHAvZ2NyeXB0LyA8aHR0cHM6Ly93 d3cuZ251cGcub3JnL2Z0cC9nY3J5cHQvPg0KQSBsaXN0IG9mIEdudVRMUyBtaXJyb3JzIGNh biBiZSBmb3VuZCBhdA0KaHR0cDovL3d3dy5nbnV0bHMub3JnL2Rvd25sb2FkLmh0bWwgPGh0 dHA6Ly93d3cuZ251dGxzLm9yZy9kb3dubG9hZC5odG1sPg0KDQpIZXJlIGFyZSB0aGUgWFog Y29tcHJlc3NlZCBzb3VyY2VzOg0KaHR0cHM6Ly93d3cuZ251cGcub3JnL2Z0cC9nY3J5cHQv Z251dGxzL3YzLjcvZ251dGxzLTMuNy4xMS50YXIueHogDQo8aHR0cHM6Ly93d3cuZ251cGcu b3JnL2Z0cC9nY3J5cHQvZ251dGxzL3YzLjcvZ251dGxzLTMuNy4xMS50YXIueHo+DQoNCkhl cmUgYXJlIE9wZW5QR1AgZGV0YWNoZWQgc2lnbmF0dXJlcyBzaWduZWQgdXNpbmcga2V5Og0K NUQ0NkNCMEY3NjM0MDVBNzA1MzU1NkY0N0E3NUE2NDhCM0Y5MjIwQw0KaHR0cHM6Ly93d3cu Z251cGcub3JnL2Z0cC9nY3J5cHQvZ251dGxzL3YzLjcvZ251dGxzLTMuNy4xMS50YXIueHou c2lnIA0KPGh0dHBzOi8vd3d3LmdudXBnLm9yZy9mdHAvZ2NyeXB0L2dudXRscy92My43L2du dXRscy0zLjcuMTEudGFyLnh6LnNpZz4NCg0KTm90ZSB0aGF0IGl0IGhhcyBiZWVuIHNpZ25l ZCB3aXRoIG15IG9wZW5wZ3Aga2V5Og0KcHViIMKgIGVkMjU1MTkgMjAyMS0xMi0yMyBbU0Nd IFtleHBpcmVzOiAyMDI3LTAxLTAxXQ0KIMKgIMKgIMKgIDVENDZDQjBGNzYzNDA1QTcwNTM1 NTZGNDdBNzVBNjQ4QjNGOTIyMEMNCnVpZCDCoCDCoCDCoCDCoCDCoCBbdWx0aW1hdGVdIFpv bHRhbiBGcmlkcmljaCA8emZyaWRyaWNAcmVkaGF0LmNvbT4NCnN1YiDCoCBjdjI1NTE5IDIw MjEtMTItMjMgW0VdIFtleHBpcmVzOiAyMDI3LTAxLTAxXQ0KDQpSZWdhcmRzLA0KWm9sdGFu DQoNCg== --------------CLTHSb9N1ChOaDR3dCw0YCWO Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <!DOCTYPE html> <html> <head> <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF= -8"> </head> <body> <p> </p> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div class=3D"moz-text-html" lang=3D"x-unicode"> <div dir=3D"ltr"> <div><font face=3D"monospace">Hello,</font></div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">We have just released gnutls-3.7.11. This is a bug fix release on the 3.7.x branch.</font></div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">We would like to thank everyone who contributed in this release:</font></div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">Xin Long, Daiki Ueno and Zoltan Fridrich<br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div><font face=3D"monospace">The detailed list of changes follows:</font> </div> </div> <div dir=3D"ltr"><font face=3D"monospace"><span><span class=3D= ""><br> </span></span></font></div> <div dir=3D"ltr"> <pre class=3D"code highlight" lang=3D"plaintext"><span>* Ve= rsion 3.7.11 (released 2024-04-13)</span> <span></span> <span>** libgnutls: Fix side-channel in the deterministic ECDSA.</span> <span> Reported by George Pantelakis (#1516).</span> <span> [GNUTLS-SA-2023-12-04, CVSS: medium] [CVE-2024-28834]</span> <span></span> <span>** libgnutls: Fixed a bug where certtool crashed when verifying a c= ertificate</span> <span> chain with more than 16 certificates. Reported by William Woodru= ff (#1525)</span> <span> and yixiangzhike (#1527).</span> <span> [GNUTLS-SA-2024-01-23, CVSS: medium] [CVE-2024-28835]</span> <span></span> <span>** libgnutls: Fix more timing side-channel inside RSA-PSK key excha= nge</span> <span> [GNUTLS-SA-2024-01-14, CVSS: medium] [CVE-2024-0553]</span> <span></span> <span>** libgnutls: Fix assertion failure when verifying a certificate ch= ain with a</span> <span> cycle of cross signatures</span> <span> [GNUTLS-SA-2024-01-09, CVSS: medium] [CVE-2024-0567]</span> <span></span> <span>** libgnutls: Fix timing side-channel inside RSA-PSK key exchange.<= /span> <span> [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]</span> <span></span> <span>** API and ABI modifications:</span> <span>No changes since last version.</span> <font face=3D"monospace"> Getting the Software </font><font face=3D"monospace">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D</font></pre> </div> <div dir=3D"ltr"> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">GnuTLS may be downloaded directly from <br> </font> <font face=3D"monospace"><a href=3D"https://www.gnupg.org/ftp/gcrypt/" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.gnupg.= org/ftp/gcrypt/&source=3Dgmail&ust=3D1652432968350000&usg=3DA= OvVaw3njjTg_V6cIskMjpkmAg7X">https://www.gnupg.org/ftp/<wbr>gcrypt/</a> <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">A list of GnuTLS mirrors can be found at</font></div> <font face=3D"monospace"> </font> <div dir=3D"ltr"> <font face=3D"monospace"><a href=3D"http://www.gnutls.org/download.html" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttp://www.gnutls.= org/download.html&source=3Dgmail&ust=3D1652432968350000&usg=3D= AOvVaw1J-wc5GojHL2n94ox7b_09">http://www.gnutls.org/<wbr>download.html</a= > <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"> Here are the XZ compressed sources:<br> </font> <font face=3D"monospace"><a href=3D"https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.11.tar.xz= " target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.gnupg.= org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz&source=3Dgmail&ust= =3D1652432968350000&usg=3DAOvVaw3ybeveKudYmPlqI6U8OXIO" moz-do-not-send=3D"true">https://www.gnupg.org/ftp/<wbr= >gcrypt/gnutls/v3.7/gnutls-3.7.11.tar.xz</a> <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">Here are OpenPGP detached signatures signed using key:</font></div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace">5D46CB0F763405A7053= 556F47A75A6</font><wbr><font face=3D"monospace">48B3F9220C</font></div> <font face=3D"monospace"> </font> <font face=3D"monospace"> <= /font> <div dir=3D"ltr"><font face=3D"monospace"><a href=3D"https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.11.tar.xz= =2Esig" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.gnupg.= org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz.sig&source=3Dgmail&= ;ust=3D1652432968350000&usg=3DAOvVaw1J49sWnCfoI9B3ou7WbdQ6" moz-do-not-send=3D"true">https://www.gnupg.org/ftp/<wbr= >gcrypt/gnutls/v3.7/gnutls-3.7.11.tar.xz.sig</a> <br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"><br> </font> </div> <font face=3D"monospace"> </font> <div dir=3D"ltr"><font face=3D"monospace"> Note that it has b= een signed with my openpgp key:<br> pub =C2=A0 ed25519 2021-12-23 [SC] [expires: 2027-01-01]<= br> =C2=A0 =C2=A0 =C2=A0 5D46CB0F763405A7053556F47A75A6</font= ><wbr><font face=3D"monospace">48B3F9220C<br> uid =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 [ultimate] Zoltan = Fridrich <<a href=3D"mailto:[email protected]" target=3D"_blank" class=3D"moz-txt-link-freetext">[email protected]</a>= ><br> sub =C2=A0 cv25519 2021-12-23 [E] [expires: 2027-01-01]</= font><font face=3D"monospace"><br> </font> <font face=3D"monospace"><br> Regards,<br> Zoltan</font></div> </div> </div> </div> <p></p> </div> </body> </html> --------------CLTHSb9N1ChOaDR3dCw0YCWO-- --------------cUgr0TvvVsU8kLByHM0Ki340 Content-Type: application/pgp-keys; name="OpenPGP_0x7A75A648B3F9220C.asc" Content-Disposition: attachment; filename="OpenPGP_0x7A75A648B3F9220C.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xjMEYcRaoxYJKwYBBAHaRw8BAQdA5U8Cb4ZMYCjuAa6tqNKbRxXzycS2iLvNzWki bGD2fe7NJVpvbHRhbiBGcmlkcmljaCA8emZyaWRyaWNAcmVkaGF0LmNvbT7CmgQT FgoAQhYhBF1Gyw92NAWnBTVW9Hp1pkiz+SIMBQJhxFqjAhsDBQkDwmcABQsJCAcC AyICAQYVCgkICwIEFgIDAQIeBwIXgAAKCRB6daZIs/kiDGnYAQCiU94/eIspZzzx V17pylayAEv23s5uKvlGo1Ml1ySrZAEA8Q2rACBmdTpUfoW3LG3MJI0l1XP3kMEu WDBiM84D2gLCmgQTFgoAQgIbAwULCQgHAgMiAgEGFQoJCAsCBBYCAwECHgcCF4AW IQRdRssPdjQFpwU1VvR6daZIs/kiDAUCZZQM4wUJCXNMwAAKCRB6daZIs/kiDBq0 AQD4kutiBvEtpeI5oHE5am/JgQUbUNQ8hGiHeJ+epRc5NQEA0xzJPYCIlvZ4jgf7 K7RiKkqjzozOLwunGummhMd1vQ3OOARhxFqjEgorBgEEAZdVAQUBAQdAxKg6y4A6 9qT7doTni8/zKuKyQKXEORZTCNxkcnz3dXoDAQgHwn4EGBYKACYWIQRdRssPdjQF pwU1VvR6daZIs/kiDAUCYcRaowIbDAUJA8JnAAAKCRB6daZIs/kiDM/EAP0VN87W waMcNwZcyocG/B9f419IojEx70PzMIBBlPctAgD/R/qamAlnggADzmS1PCF8+2W6 Erc+HV2W/u2+wVJu7w3CfgQYFgoAJgIbDBYhBF1Gyw92NAWnBTVW9Hp1pkiz+SIM BQJllAvfBQkJc0u8AAoJEHp1pkiz+SIMK10BALqn4HbqDvYIteOrrGZouqzV+LVq 7I9b9Kc1Fttpb1SXAP9SnmWSn6vafl3vi+Phjjec5GmKlviRHeY/mDhJlqQhAg=3D=3D =3D+8Rn -----END PGP PUBLIC KEY BLOCK----- --------------cUgr0TvvVsU8kLByHM0Ki340-- --------------0xwy1dFZrXsX1aFOr6Wj7Ir7-- --------------CnoDJMga0ECSLpWPOgb04OqV Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wnsEABYIACMWIQRdRssPdjQFpwU1VvR6daZIs/kiDAUCZlRApgUDAAAAAAAKCRB6daZIs/kiDArt AQDKVyhvuk1vxwNrRVZ17Cn1ggUqaZRdZk/L3W1G5u5jAwD+Pwh/UW176lzVgd2s56mQ2O772uae QERTTGvAqd1JzQU= =IEA0 -----END PGP SIGNATURE----- --------------CnoDJMga0ECSLpWPOgb04OqV-- --===============2140075047839203180== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Gnutls-help mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnutls-help --===============2140075047839203180==--