ELBA-2022-3937

ELBA-2022-3937 - gnutls

Type:	BUG
Impact:	NA
Release Date:	2022-06-30

Description

[3.7.3-9]
- Stop using typeof keyword for tss2 function prototypes (#2057490)
- Ensure allowlist API is called before priority string construction (#1975421)

[3.7.3-8]
- Fix previous change for loading libtss2* (#2057490)

[3.7.3-7]
- Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
- Ensure allowlisting API is called before priority string is constructed (#2042532)
- Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)

[3.7.3-6]
- Compile out GOST algorithm IDs (#1945292)

[3.7.3-5]
- Fix upstream testsuite in fips mode (#2051637)

[3.7.3-4]
- Specify FIPS140-3 module name and version
- fips: allow a few more primes in RSA key generation
- fips: tighten PKCS#12 algorithm checks
- Correct return value of KTLS stub API

[3.7.3-3]
- Disable config reload in order to not break allowlisting (#2042532)

[3.7.3-2]
- Build with TPM2 support, patch from Alexander Sosedkin (#2033220)

[3.7.3-1]
- Update to gnutls 3.7.3 (#2033220)

[3.7.2-10]
- Update gnutls_{hash,hmac}_copy man-pages as well (#1999639)

[3.7.2-9]
- Drop support for GNUTLS_NO_EXPLICIT_INIT envvar in favor of
GNUTLS_NO_IMPLICIT_INIT (#1999639)
- Expand documentation of gnutls_{hash,hmac}_copy, mentioning that
those do not always work (#1999639)

[3.7.2-9]
- Fix race condition when resolving SYSTEM priority in allowlisting mode (#2012249)

[3.7.2-8]
- Fix issues in bundled libopts, spotted by covscan (#1938730)

[3.7.2-7]
- Enable Intel CET
- Remove unnecessary CCASFLAGS setting for annocheck

[3.7.2-6]
- Reorder doc/invoke-*.texi generation (#1975482)
- Temporarily disable LTO for aarch64 and ppc64le

[3.7.2-5]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[3.7.2-4]
- Disable GOST cryptography by default (#1945292)
- Tighten timestamp adjustment when not bootstrapping (#1975482)
- Re-enable LTO (#1986143)

[3.7.2-3]
- Enable allowlisting configuration mode (#1975421)

[3.7.2-2]
- Remove %defattr invocations which are no longer necessary
- libpkcs11mock1.* is not installed anymore
- hobble-gnutls: Remove SRP removal
- Use correct source URL
- Switch to using %gpgverify macro

[3.7.2-1]
- Update to upstream 3.7.2 release (#1966479)

[3.7.1-6]
- Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065

[3.7.1-5]
- Fix typo in TPM 1.2 disablement (#1927370)

[3.7.1-4]
- Disable TPM support by default (#1927370)

[3.7.1-3]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[3.7.1-2]
- Restore fipscheck dependency

[3.7.1-1]
- Update to upstream 3.7.1 release
- Remove fipscheck dependency, as it is now calculated with an
internal tool

[3.7.0-4]
- Tolerate duplicate certs in the chain also with PKCS #11 trust store

[3.7.0-3]
- Reduce BRs for non-bootstrapping build

[3.7.0-2]
- Tolerate duplicate certs in the chain

[3.7.0-1]
- Update to upstream 3.7.0 release
- Temporarily disable LTO

[3.6.15-4]
- Fix broken tests on rawhide (#1908110)
- Add BuildRequires: make (by Tom Stellard)

[3.6.15-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[3.6.15-2]
- Re-enable LTO now that upstream GCC bugs have been fixed

[3.6.15-1]
- Update to upstream 3.6.15 release

[3.6.14-7]
- Disable LTO on ppc64le

[3.6.14-6]
- Fix underlinking of libpthread

[3.6.14-5]
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[3.6.14-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[3.6.14-3]
- Rebuild with autogen built with guile-2.2 (#1852706)

[3.6.14-2]
- Fix memory leak when serializing iovec_t (#1845083)
- Fix automatic libraries sonames detection (#1845806)

[3.6.14-1]
- Update to upstream 3.6.14 release

[3.6.13-6]
- Update gnutls-3.6.13-superseding-chain.patch

[3.6.13-5]
- Fix cert chain validation behavior if the last cert has expired (#1842178)

[3.6.13-4]
- Add option to gnutls-cli to wait for resumption under TLS 1.3

[3.6.13-3]
- Disable RSA blinding during FIPS self-tests

[3.6.13-2]
- Bump linked libraries soname to fix FIPS selftests (#1835265)

[3.6.13-1]
- Update to upstream 3.6.13 release

[3.6.12-2]
- Fix FIPS POST (#1813384)
- Fix gnutls-serv --echo to not exit when a message is received (#1816583)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	gnutls-3.7.3-9.el9.src.rpm	e5d29a49a283143a25961df9d951e43e579880b37269c9b91ec536f37b1622e7	-	ol9_aarch64_appstream
	gnutls-3.7.3-9.el9.src.rpm	e5d29a49a283143a25961df9d951e43e579880b37269c9b91ec536f37b1622e7	-	ol9_aarch64_baseos_latest
	gnutls-3.7.3-9.el9.src.rpm	e5d29a49a283143a25961df9d951e43e579880b37269c9b91ec536f37b1622e7	-	ol9_aarch64_u0_baseos_base
	gnutls-3.7.3-9.el9.aarch64.rpm	c17f98546aa0e4f728c60292192399c9f497d62c94407feb9c23c078f1f50c72	-	ol9_aarch64_baseos_latest
	gnutls-3.7.3-9.el9.aarch64.rpm	c17f98546aa0e4f728c60292192399c9f497d62c94407feb9c23c078f1f50c72	-	ol9_aarch64_u0_baseos_base
	gnutls-c++-3.7.3-9.el9.aarch64.rpm	3631c88c8efc840da83e9158264a3e648291a082e79b184c45f191eb31af6e42	-	ol9_aarch64_appstream
	gnutls-dane-3.7.3-9.el9.aarch64.rpm	7895aab5f8adddb6ad306a90861b3738bb1c7add263676c22f02697848df3fe5	-	ol9_aarch64_appstream
	gnutls-devel-3.7.3-9.el9.aarch64.rpm	bea3c5c99f73d10c8e3fa20268ced821c70f94828bceae82bdd2e6bc92481785	-	ol9_aarch64_appstream
	gnutls-utils-3.7.3-9.el9.aarch64.rpm	67892cc47ed3a06eae94711986d26da26ad107300692a541e8e417978f882c04	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	gnutls-3.7.3-9.el9.src.rpm	e5d29a49a283143a25961df9d951e43e579880b37269c9b91ec536f37b1622e7	-	ol9_x86_64_appstream
	gnutls-3.7.3-9.el9.src.rpm	e5d29a49a283143a25961df9d951e43e579880b37269c9b91ec536f37b1622e7	-	ol9_x86_64_baseos_latest
	gnutls-3.7.3-9.el9.src.rpm	e5d29a49a283143a25961df9d951e43e579880b37269c9b91ec536f37b1622e7	-	ol9_x86_64_u0_baseos_base
	gnutls-3.7.3-9.el9.i686.rpm	5d24c5eaa0a80b3c2790d0c4b9636f1e009ed8e0e6c53ca6e82e33dac655d836	-	ol9_x86_64_baseos_latest
	gnutls-3.7.3-9.el9.i686.rpm	5d24c5eaa0a80b3c2790d0c4b9636f1e009ed8e0e6c53ca6e82e33dac655d836	-	ol9_x86_64_u0_baseos_base
	gnutls-3.7.3-9.el9.x86_64.rpm	713f8bcf64927c2d692f789e156e85cc71d5d5eea8000712c3abfd346cd34de4	-	ol9_x86_64_baseos_latest
	gnutls-3.7.3-9.el9.x86_64.rpm	713f8bcf64927c2d692f789e156e85cc71d5d5eea8000712c3abfd346cd34de4	-	ol9_x86_64_u0_baseos_base
	gnutls-c++-3.7.3-9.el9.i686.rpm	840f46c4488faa5816556b665aa53d76ec4298888837aa47ff9e53b41537d46e	-	ol9_x86_64_appstream
	gnutls-c++-3.7.3-9.el9.x86_64.rpm	c072b302a0b3e974b48d06ae29951a53882ee86a9915bae1f6f3519cb6049894	-	ol9_x86_64_appstream
	gnutls-dane-3.7.3-9.el9.i686.rpm	11fc935f7d92496dd2e4448078a26179cf901e06a90bbb7b064ecff7f2d4d11d	-	ol9_x86_64_appstream
	gnutls-dane-3.7.3-9.el9.x86_64.rpm	c020aa1f5d3754b093b2ff04b2a00da5e1bbf4d3e923e74c085ee787a1ee4faf	-	ol9_x86_64_appstream
	gnutls-devel-3.7.3-9.el9.i686.rpm	334fffd27e16394f9d57a66606e4531aff09f8958342bf4d752697502cc0658a	-	ol9_x86_64_appstream
	gnutls-devel-3.7.3-9.el9.x86_64.rpm	0d62d06c54cdbea77df11bf478b7ef09f6649f12651c9fa7255b81158159e454	-	ol9_x86_64_appstream
	gnutls-utils-3.7.3-9.el9.x86_64.rpm	6ae388bc733135ecc009ac856d06229508db367c738b05b4481e671107e6e40d	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team