diff options
| author | leot <leot@pkgsrc.org> | 2020-06-08 19:48:14 +0000 |
|---|---|---|
| committer | leot <leot@pkgsrc.org> | 2020-06-08 19:48:14 +0000 |
| commit | aceb37bc313d0813c25a93b39471a8282df2a374 (patch) | |
| tree | 6b80a7f2dc07301460f58416d227647503ab868c /security/gnutls/Makefile | |
| parent | 99ab7c3d4e712cb825edc2cb4b500fd36b7e4fe2 (diff) | |
| download | pkgsrc-aceb37bc313d0813c25a93b39471a8282df2a374.tar.gz | |
gnutls: Update to 3.6.14
Changes:
3.6.14
------
* libgnutls: Fixed insecure session ticket key construction, since 3.6.4.
The TLS server would not bind the session ticket encryption key with a
value supplied by the application until the initial key rotation, allowing
attacker to bypass authentication in TLS 1.3 and recover previous
conversations in TLS 1.2 (#1011).
[GNUTLS-SA-2020-06-03, CVSS: high]
* libgnutls: Fixed handling of certificate chain with cross-signed
intermediate CA certificates (#1008).
* libgnutls: Fixed reception of empty session ticket under TLS 1.2 (#997).
* libgnutls: gnutls_x509_crt_print() is enhanced to recognizes commonName
(2.5.4.3), decodes certificate policy OIDs (!1245), and prints Authority
Key Identifier (AKI) properly (#989, #991).
* certtool: PKCS #7 attributes are now printed with symbolic names (!1246).
* libgnutls: Added several improvements on Windows Vista and later releases
(!1257, !1254, !1256). Most notably the system random number generator now
uses Windows BCrypt* API if available (!1255).
* libgnutls: Use accelerated AES-XTS implementation if possible (!1244).
Also both accelerated and non-accelerated implementations check key block
according to FIPS-140-2 IG A.9 (!1233).
* libgnutls: Added support for AES-SIV ciphers (#463).
* libgnutls: Added support for 192-bit AES-GCM cipher (!1267).
* libgnutls: No longer use internal symbols exported from Nettle (!1235)
* API and ABI modifications:
GNUTLS_CIPHER_AES_128_SIV: Added
GNUTLS_CIPHER_AES_256_SIV: Added
GNUTLS_CIPHER_AES_192_GCM: Added
gnutls_pkcs7_print_signature_info: Added
Diffstat (limited to 'security/gnutls/Makefile')
| -rw-r--r-- | security/gnutls/Makefile | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/security/gnutls/Makefile b/security/gnutls/Makefile index a52d741266e..f445f9e73e3 100644 --- a/security/gnutls/Makefile +++ b/security/gnutls/Makefile @@ -1,7 +1,6 @@ -# $NetBSD: Makefile,v 1.212 2020/05/22 10:55:50 adam Exp $ +# $NetBSD: Makefile,v 1.213 2020/06/08 19:48:14 leot Exp $ -DISTNAME= gnutls-3.6.13 -PKGREVISION= 2 +DISTNAME= gnutls-3.6.14 CATEGORIES= security devel MASTER_SITES= https://www.gnupg.org/ftp/gcrypt/gnutls/v3.6/ EXTRACT_SUFX= .tar.xz |