508360 – =net-libs/gnutls-3.3.1 version bump

Bug 508360 - =net-libs/gnutls-3.3.1 version bump

Summary: =net-libs/gnutls-3.3.1 version bump

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	[OLD] Library (show other bugs)
Hardware:	All Linux

Importance:	Normal enhancement (vote)
Assignee:	Crypto team [DISABLED]

URL:	http://article.gmane.org/gmane.comp.e...
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2014-04-22 05:35 UTC by Lars Wendler (Polynomial-C) (RETIRED)
Modified:	2014-04-22 17:37 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev

2014-04-22 05:35:27 UTC

* Version 3.3.1 (released 2014-04-19)

** libgnutls: Enforce more strict checks to heartbeat messages
concerning padding and payload. Suggested by Peter Dettman.

** libgnutls: Allow decoding PKCS #8 files with ECC parameters
from openssl.

** libgnutls: Several small bug fixes found by coverity.

** libgnutls: The conditionally available self-test functions
were moved to self-test.h.

** libgnutls: Fixed issue with the check of incoming data when two
different recv and send pointers have been specified. Reported and
investigated by JMRecio.

** libgnutls: Fixed issue in the RSA-PSK key exchange, which would 
result to illegal memory access if a server hint was provided. Reported
by André Klitzing.

** libgnutls: Fixed client memory leak in the PSK key exchange, if a
server hint was provided.

** libgnutls: Corrected the *get_*_othername_oid() functions.

** API and ABI modifications:
No changes since last version.

Comment 1 Alon Bar-Lev (RETIRED) gentoo-dev

2014-04-22 17:37:11 UTC

thanks!