Adolf Belka f5e719df3e
gnutls: Update to 3.6.16 ...
- Update from 3.6.14 to 3.6.16
- Update rootfile
- Changelog
* Version 3.6.16 (released 2021-05-24)
** libgnutls: Fixed potential miscalculation of ECDSA/EdDSA code backported from
Nettle. In GnuTLS, as long as it is built and linked against the fixed
version of Nettle, this only affects GOST curves. [CVE-2021-20305]
** libgnutls: Fixed potential use-after-free in sending "key_share"
and "pre_shared_key" extensions. When sending those extensions, the
client may dereference a pointer no longer valid after
realloc. This happens only when the client sends a large Client
Hello message, e.g., when HRR is sent in a resumed session
previously negotiated large FFDHE parameters, because the initial
allocation of the buffer is large enough without having to call
realloc (#1151 ). [GNUTLS-SA-2021-03-10, CVSS: low]
* Version 3.6.15 (released 2020-09-04)
** libgnutls: Fixed "no_renegotiation" alert handling at incorrect timing.
The server sending a "no_renegotiation" alert in an unexpected timing,
followed by an invalid second handshake was able to cause a TLS 1.3 client to
crash via a null-pointer dereference. The crash happens in the application's
error handling path, where the gnutls_deinit function is called after
detecting a handshake failure (#1071 ). [GNUTLS-SA-2020-09-04, CVSS: medium]
** libgnutls: If FIPS self-tests are failed, gnutls_fips140_mode_enabled() now
indicates that with a false return value (!1306 ).
** libgnutls: Under FIPS mode, the generated ECDH/DH public keys are checked
accordingly to SP800-56A rev 3 (!1295 , !1299 ).
** libgnutls: gnutls_x509_crt_export2() now returns 0 upon success, rather than
the size of the internal base64 blob (#1025 ). The new behavior aligns to the
existing documentation.
** libgnutls: Certificate verification failue due to OCSP must-stapling is not
honered is now correctly marked with the GNUTLS_CERT_INVALID flag
(!1317 ). The new behavior aligns to the existing documentation.
** libgnutls: The audit log message for weak hashes is no longer printed twice
(!1301 ).
** libgnutls: Fixed version negotiation when TLS 1.3 is enabled and TLS 1.2 is
disabled in the priority string. Previously, even when TLS 1.2 is explicitly
disabled with "-VERS-TLS1.2", the server still offered TLS 1.2 if TLS 1.3 is
enabled (#1054 ).
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2021-06-04 10:46:43 +00:00
2021-05-20 09:45:14 +00:00
2021-05-20 09:42:55 +00:00
2021-06-03 09:14:21 +00:00
2021-06-03 09:14:21 +00:00
2021-03-18 11:19:43 +00:00
2018-04-14 18:42:00 +02:00
2020-04-20 15:19:25 +00:00
2020-03-21 16:14:08 +00:00
2018-04-11 20:03:53 +01:00
2021-04-02 16:19:28 +00:00
2021-04-02 16:18:49 +00:00
2015-12-13 22:28:15 +00:00
2008-10-11 00:50:29 +02:00
2021-03-18 11:20:32 +00:00
2021-02-12 11:54:42 +00:00
2020-05-01 19:08:38 +00:00
2008-10-04 13:06:55 +02:00
2021-04-10 13:37:50 +00:00
2017-06-07 09:55:27 +01:00
2006-11-01 17:55:25 +00:00
2020-05-09 12:03:23 +00:00
2021-04-02 16:18:20 +00:00
2021-05-25 09:46:28 +00:00
2020-08-16 10:29:42 +00:00
2017-09-22 18:56:04 +01:00
2007-10-08 18:34:12 +00:00
2013-08-28 11:18:37 +02:00
2021-03-29 12:53:09 +00:00
2015-07-10 15:14:15 +02:00
2020-03-21 15:44:08 +00:00
2007-04-12 21:55:51 +00:00
2021-04-20 09:05:03 +00:00
2018-07-14 13:43:49 +01:00
2015-08-21 21:08:02 +01:00
2021-05-06 09:54:21 +00:00
2020-05-10 17:27:28 +00:00
2019-05-27 14:39:32 +01:00
2021-04-02 16:17:50 +00:00
2021-05-20 09:42:55 +00:00
2021-06-03 09:16:30 +00:00
2021-04-02 16:16:53 +00:00
2021-04-20 09:04:34 +00:00
2021-03-12 14:46:18 +00:00
2019-12-02 17:10:15 +00:00
2020-05-10 17:27:28 +00:00
2021-04-02 16:15:28 +00:00
2021-05-31 12:40:11 +00:00
2018-02-11 22:19:45 +00:00
2020-02-17 08:50:46 +00:00
2021-04-20 09:06:45 +00:00
2018-06-25 10:54:36 +01:00
2020-04-12 08:16:28 +02:00
2017-04-17 12:36:49 +01:00
2021-04-20 09:07:51 +00:00
2021-04-02 16:14:17 +00:00
2021-04-02 16:13:04 +00:00
2021-05-17 20:48:54 +00:00
2013-11-21 13:50:03 +01:00
2014-09-04 11:35:03 +02:00
2015-01-02 00:49:34 +01:00
2021-03-02 17:40:34 +00:00
2021-03-29 12:54:50 +00:00
2020-02-18 06:01:44 +00:00
2007-01-04 21:30:12 +00:00
2021-05-20 09:47:41 +00:00
2021-05-31 12:40:44 +00:00
2021-02-03 22:23:13 +00:00
2020-11-05 23:29:18 +00:00
2021-02-05 11:16:27 +00:00
2021-05-18 13:52:11 +00:00
2015-05-03 21:51:04 +02:00
2017-06-07 09:55:16 +01:00
2020-09-24 17:36:37 +00:00
2013-04-12 12:43:27 +02:00
2021-02-05 16:53:29 +00:00
2021-04-20 09:08:15 +00:00
2021-03-29 12:55:40 +00:00
2006-11-01 17:55:25 +00:00
2021-04-02 16:12:33 +00:00
2021-04-02 16:12:02 +00:00
2021-05-17 20:51:19 +00:00
2018-02-11 20:56:12 +00:00
2021-04-07 13:12:27 +00:00
2021-05-20 09:46:18 +00:00
2021-04-07 13:13:18 +00:00
2016-08-23 13:04:47 -04:00
2021-06-04 10:46:43 +00:00
2013-07-03 21:38:17 +02:00
2012-08-20 11:39:23 +02:00
2019-03-13 15:04:40 +01:00
2020-04-30 14:52:53 +00:00
2006-11-01 17:55:25 +00:00
2018-02-11 20:56:12 +00:00
2021-04-02 16:09:45 +00:00
2021-04-02 16:09:20 +00:00
2021-04-02 16:08:09 +00:00
2018-07-12 10:03:34 +01:00
2018-02-16 20:01:55 +00:00
2006-10-23 21:16:38 +00:00
2019-02-14 11:43:31 +01:00
2018-07-20 12:03:09 +00:00
2021-05-20 09:39:12 +00:00
2021-04-02 16:07:46 +00:00
2021-04-02 16:07:10 +00:00
2010-07-25 20:13:50 +02:00
2021-04-30 14:16:24 +00:00
2021-01-29 11:14:22 +00:00
2021-01-25 21:23:49 +00:00
2021-05-25 09:49:21 +00:00
2010-09-15 17:43:06 +02:00
2019-05-27 14:39:00 +01:00
2013-10-15 16:46:15 +02:00
2018-10-26 11:23:55 +00:00
2013-07-06 09:36:34 +02:00
2020-08-16 10:29:42 +00:00
2018-10-22 19:51:19 +01:00
2021-01-13 11:22:59 +00:00
2020-09-24 17:36:38 +00:00
2009-05-17 17:24:59 +02:00
2021-02-09 11:38:48 +00:00
2012-08-24 16:22:24 +02:00
2018-10-21 22:17:54 +01:00
2021-04-26 17:08:12 +00:00
2014-12-07 15:23:57 +01:00
2021-04-07 22:29:24 +01:00
2021-04-26 17:08:53 +00:00
2018-11-19 18:58:48 +00:00
2010-12-07 16:52:03 +01:00
2021-04-26 17:09:48 +00:00
2010-07-13 18:42:44 +02:00
2021-04-26 17:10:13 +00:00
2021-03-03 13:32:28 +00:00
2021-04-26 10:02:51 +00:00
2021-04-26 17:11:00 +00:00
2019-12-29 19:09:27 +00:00
2020-09-24 17:36:37 +00:00
2021-04-30 14:18:02 +00:00
2021-04-27 07:58:56 +00:00
2021-04-02 16:01:15 +00:00
2016-09-24 13:07:13 +01:00
2021-04-07 13:14:11 +00:00
2015-12-11 18:47:20 +00:00
2018-07-01 12:35:53 +01:00
2015-06-23 14:01:44 +02:00
2015-06-23 13:56:46 +02:00
2020-09-24 17:36:38 +00:00
2015-06-23 13:37:57 +02:00
2013-08-27 20:20:47 +02:00
2014-08-07 14:49:50 +02:00
2021-04-02 16:00:11 +00:00
2021-04-06 09:54:40 +00:00
2020-04-26 07:29:59 +00:00
2014-08-20 21:45:12 +02:00
2020-03-21 16:03:54 +00:00
2015-02-01 17:39:33 +01:00
2021-05-25 09:51:20 +00:00
2015-06-18 13:23:55 +02:00
2021-04-02 16:00:44 +00:00
2021-02-22 11:28:11 +00:00
2021-05-12 10:37:58 +00:00
2021-05-12 10:38:26 +00:00
2018-02-11 20:56:12 +00:00
2020-06-20 08:55:06 +02:00
2020-09-24 17:36:38 +00:00
2017-04-28 13:04:19 +01:00
2019-11-13 19:11:09 +00:00
2007-07-01 21:41:27 +00:00
2021-04-26 10:23:55 +00:00
2020-01-16 18:22:51 +00:00
2021-02-09 11:51:38 +00:00
2021-02-05 11:24:35 +00:00
2021-02-09 12:00:04 +00:00
2012-06-17 17:00:05 +02:00
2021-04-02 16:06:18 +00:00
2006-11-01 17:55:25 +00:00
2006-11-01 16:52:39 +00:00
2020-01-04 18:23:52 +00:00
2006-12-22 17:24:32 +00:00
2021-05-10 19:26:54 +00:00
2021-04-02 16:06:50 +00:00
2021-01-27 21:06:57 +00:00
2013-10-24 15:20:48 +02:00
2020-08-16 10:29:43 +00:00
2018-07-02 19:10:36 +01:00
2012-08-07 20:21:06 +02:00
2020-03-26 09:42:12 +00:00
2021-04-02 16:03:20 +00:00
2021-04-02 16:05:58 +00:00
2021-04-02 16:05:28 +00:00
2021-04-02 16:04:41 +00:00
2021-04-02 16:04:01 +00:00
2021-02-08 13:51:04 +00:00
2021-04-06 09:55:46 +00:00
2021-05-11 16:23:37 +00:00
2020-12-27 10:29:55 +00:00
2018-06-30 19:51:38 +01:00
2018-10-22 14:58:29 +01:00
2016-01-10 21:18:20 +00:00
2018-08-03 13:48:46 +02:00
2020-09-24 17:36:37 +00:00
2020-05-09 12:03:02 +00:00
2021-05-17 14:07:33 +00:00
2021-02-16 17:32:28 +00:00
2020-12-01 16:10:32 +00:00
2018-04-02 15:46:40 +01:00
2020-12-10 13:03:18 +00:00
2012-08-24 15:26:30 +02:00
2021-03-22 10:42:07 +00:00
2014-07-23 22:57:47 +02:00
2018-08-16 18:55:13 +01:00
2008-01-24 06:39:06 +00:00
2020-03-21 16:14:08 +00:00
2021-02-09 16:10:07 +00:00
2021-04-02 15:38:46 +00:00
2021-04-02 15:59:17 +00:00
2021-04-02 15:58:45 +00:00
2021-05-05 11:26:56 +00:00
2021-04-02 15:58:00 +00:00
2021-04-02 15:57:37 +00:00
2021-04-02 15:57:04 +00:00
2021-04-02 15:55:51 +00:00
2021-04-02 15:55:15 +00:00
2021-04-02 15:53:43 +00:00
2021-04-02 15:53:08 +00:00
2021-04-02 15:52:31 +00:00
2021-04-02 15:52:08 +00:00
2021-04-02 15:51:30 +00:00
2021-04-02 15:50:51 +00:00
2021-04-02 15:50:03 +00:00
2021-04-02 15:49:25 +00:00
2021-04-02 15:48:54 +00:00
2021-04-02 15:46:08 +00:00
2014-08-23 16:00:08 +02:00
2021-04-20 09:09:59 +00:00
2007-01-24 19:13:45 +00:00
2021-05-10 19:27:18 +00:00
2021-04-10 13:39:32 +00:00
2020-08-17 17:55:35 +00:00
2021-05-25 09:42:35 +00:00
2008-12-12 16:19:56 +01:00
2020-12-27 10:55:03 +00:00
2006-11-01 16:52:39 +00:00
2021-03-03 16:45:57 +00:00
2021-05-14 13:22:09 +00:00
2021-05-14 11:42:06 +00:00
2020-01-11 14:35:11 +01:00
2018-03-19 11:52:44 +00:00
2010-07-25 20:13:50 +02:00
2018-02-11 22:19:45 +00:00
2021-05-20 09:47:11 +00:00
2008-10-11 00:50:29 +02:00
2019-05-27 14:40:03 +01:00
2021-04-10 13:37:23 +00:00
2017-05-19 17:44:13 +01:00
2019-12-29 19:14:30 +00:00
2014-01-29 17:22:48 +01:00
2020-08-16 10:29:42 +00:00
2021-04-02 15:45:29 +00:00
2021-02-01 10:45:45 +00:00
2016-04-27 12:56:23 +01:00
2012-08-12 16:39:18 -04:00
2018-07-12 10:03:34 +01:00
2016-06-17 13:03:34 +01:00
2015-02-01 20:45:58 +01:00
2020-03-29 06:34:18 +00:00
2018-07-03 16:03:37 +01:00
2021-03-10 13:59:29 +00:00
2020-08-16 10:29:42 +00:00
2010-04-11 09:07:13 +02:00
2021-01-06 15:21:42 +00:00
2021-04-11 12:12:16 +00:00
2020-04-01 14:40:39 +00:00
2021-01-18 13:04:33 +00:00
2021-03-03 13:27:03 +00:00
2021-03-22 10:40:15 +00:00
2012-08-11 18:13:23 -04:00
2017-01-29 19:30:13 +00:00
2015-09-11 15:37:20 +02:00
2021-03-11 14:57:21 +00:00
2014-11-22 23:43:46 +01:00
2021-02-08 11:47:59 +00:00
2019-08-16 12:17:51 +02:00
2021-04-02 16:02:50 +00:00
2020-11-05 23:30:38 +00:00
2017-10-04 12:47:28 +01:00
2018-10-21 12:43:37 +01:00
2021-02-12 11:53:56 +00:00
2021-04-02 16:01:57 +00:00
2017-04-06 10:06:08 +01:00
2021-04-02 16:02:26 +00:00
2014-01-10 20:30:13 +01:00
2020-11-06 10:13:19 +00:00
2018-08-13 19:49:48 +01:00
2016-06-01 22:22:31 +01:00
2009-03-28 11:01:11 +01:00
2020-08-29 18:08:57 +00:00
2006-10-23 21:16:38 +00:00
2020-04-30 14:56:49 +00:00
2021-05-05 11:21:00 +00:00
2013-12-26 14:03:31 +01:00
2007-03-26 19:59:37 +00:00
2016-07-16 10:53:53 +01:00
2021-04-26 17:04:00 +00:00
2019-04-16 18:05:18 +02:00
2008-06-12 19:34:34 +02:00
2021-04-26 10:07:56 +00:00
2021-05-31 12:38:04 +00:00
2018-03-26 07:29:51 +02:00
2020-06-01 21:11:58 +02:00
2020-03-23 18:38:17 +00:00
2020-10-15 15:33:44 +00:00
2011-07-24 09:53:55 +02:00
2010-01-14 21:26:09 +01:00
2017-01-24 14:29:28 +00:00
2021-05-31 12:39:33 +00:00
f5e719df3e