[packages/gnutls] up to 3.8.4 (fixes CVE-2024-28834 CVE-2024-28835)

atler atler at pld-linux.org
Wed Mar 20 20:32:47 CET 2024


commit 1e9d4d4a0640acdcdb3b6c758838e91e92237a0e
Author: Jan Palus <atler at pld-linux.org>
Date:   Wed Mar 20 20:15:52 2024 +0100

    up to 3.8.4 (fixes CVE-2024-28834 CVE-2024-28835)
    
    - compression libraries loaded dynamically now

 gnutls-pl.po-update.patch | 2 +-
 gnutls.spec               | 9 ++++++---
 2 files changed, 7 insertions(+), 4 deletions(-)
---
diff --git a/gnutls.spec b/gnutls.spec
index 69ac1d8..b66a7ef 100644
--- a/gnutls.spec
+++ b/gnutls.spec
@@ -14,12 +14,12 @@
 Summary:	The GNU Transport Layer Security Library
 Summary(pl.UTF-8):	Biblioteka GNU TLS (Transport Layer Security)
 Name:		gnutls
-Version:	3.8.3
+Version:	3.8.4
 Release:	1
 License:	LGPL v2.1+ (libgnutls), LGPL v3+ (libdane), GPL v3+ (openssl library and tools)
 Group:		Libraries
 Source0:	ftp://ftp.gnutls.org/gcrypt/gnutls/v3.8/%{name}-%{version}.tar.xz
-# Source0-md5:	269966167fa5bf8bae5f7534bcc3c454
+# Source0-md5:	f6ba9454115a82deb352c4336648490f
 Patch0:		%{name}-info.patch
 Patch1:		%{name}-link.patch
 Patch2:		%{name}-pl.po-update.patch
@@ -85,11 +85,14 @@ Requires:	libtasn1 >= 4.11
 Requires:	nettle >= 3.6
 #Requires:	opencdk >= 0.6.6
 Requires:	p11-kit >= 0.23.1
-Requires:	zstd >= 1.3.0
 # dlopened libtss2-*
 %{?with_tpm2:Suggests:	tpm2-tss}
 # dlopened libtspi
 %{?with_tpm:Suggests:	trousers-libs >= 0.3.11}
+# dlopened libz.so.1
+Suggests:	zlib
+# dlopened libzstd.so.1
+Suggests:	zstd >= 1.3.0
 Conflicts:	gnutls < 3.2.0
 
 %description libs
diff --git a/gnutls-pl.po-update.patch b/gnutls-pl.po-update.patch
index 6a31b5e..a9c35f9 100644
--- a/gnutls-pl.po-update.patch
+++ b/gnutls-pl.po-update.patch
@@ -13,7 +13,7 @@
 -"Project-Id-Version: gnutls-3.6.8\n"
 +"Project-Id-Version: gnutls-3.7.6\n"
  "Report-Msgid-Bugs-To: bug-gnutls at gnu.org\n"
- "POT-Creation-Date: 2024-01-16 18:19+0900\n"
+ "POT-Creation-Date: 2024-03-19 13:32+0100\n"
 -"PO-Revision-Date: 2019-06-01 08:22+0200\n"
 +"PO-Revision-Date: 2022-06-03 22:30+0200\n"
  "Last-Translator: Jakub Bogusz <qboosh at pld-linux.org>\n"
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/gnutls.git/commitdiff/1e9d4d4a0640acdcdb3b6c758838e91e92237a0e



More information about the pld-cvs-commit mailing list