Information for build gnutls-3.7.6-18.el9
| ID | 25235 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Package Name | gnutls | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Version | 3.7.6 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Release | 18.el9 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Epoch | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Source | gnutls-3.7.6-18.el9.src.rpm | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Summary | A TLS protocol implementation | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Description | GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Built by | circlekoji | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| State | complete | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Volume | DEFAULT | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Started | Sat, 20 May 2023 01:46:42 CST | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Completed | Sat, 20 May 2023 02:02:20 CST | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Task | build (dist-circle9, gnutls-3.7.6-18.el9.src.rpm) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Extra | {'source': {'original_url': 'gnutls-3.7.6-18.el9.src.rpm'}} | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Tags |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| RPMs |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Logs | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Changelog | * Tue Feb 28 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-18 - Update gnutls-3.7.8-fips-pct-dh.patch to the upstream version (#2168143) * Fri Feb 10 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-17 - Fix timing side-channel in TLS RSA key exchange (#2162601) * Fri Feb 10 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-16 - fips: extend PCT to DH key generation (#2168143) * Thu Dec 15 2022 Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-15 - fips: rename hmac file to its previous name (#2148269) * Tue Nov 22 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-14 - cipher: add restriction on CCM tag length under FIPS mode (#2137807) - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266) * Tue Nov 15 2022 Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-13 - fips: make XTS key check failure not fatal (#2130971) - enable source archive verification again (#2127094) - clear server's session ticket indication at rehandshake (#2136072) - crypto-api: add block cipher API with automatic padding (#2084161) - fips: remove library path checking from FIPS integrity check (#2140908) * Tue Sep 27 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-12 - fips: mark PBKDF2 with short key and output sizes non-approved - fips: only mark HMAC as approved in PBKDF2 - fips: mark gnutls_key_generate with short key sizes non-approved - fips: fix checking on hash algorithm used in ECDSA - fips: preserve operation context around FIPS selftests API * Fri Aug 26 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-11 - Supply --with{,out}-{zlib,brotli,zstd} explicitly * Thu Aug 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-10 - Revert nettle version pinning as it doesn't work well in side-tag * Thu Aug 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-9 - Pin nettle version in Requires when compiled with FIPS * Tue Aug 23 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-8 - Bundle GMP to privatize memory functions - Disable certificate compression support by default * Tue Aug 23 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-7 - Update gnutls-3.7.6-cpuid-fixes.patch * Sat Aug 20 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-6 - Mark RSA SigVer operation approved for known modulus sizes (#2091903) - accelerated: clear AVX bits if it cannot be queried through XSAVE * Thu Aug 04 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-5 - Block DES-CBC usage in decrypting PKCS#12 bag under FIPS (#2115244) - sysrng: reseed source DRBG for prediction resistance * Fri Jul 29 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-4 - Make gnutls-cli work with KTLS for testing - Fix double-free in gnutls_pkcs7_verify (#2109790) * Mon Jul 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-3 - Limit input size for AES-GCM according to SP800-38D (#2095251) - Do not treat GPG verification errors as fatal - Remove gnutls-3.7.6-libgnutlsxx-const.patch * Tue Jul 19 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-2 - Allow enabling KTLS with config file (#2042009) * Fri Jul 01 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-1 - Update to gnutls 3.7.6 (#2097327) * Thu Mar 31 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-10 - Use only the first component of VERSION from /etc/os-release (#2070249) - Don't run power-on self-tests on DSA (#2061325) * Fri Feb 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-9 - Stop using typeof keyword for tss2 function prototypes (#2057490) - Ensure allowlist API is called before priority string construction (#1975421) * Thu Feb 24 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-8 - Fix previous change for loading libtss2* (#2057490) * Wed Feb 23 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-7 - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220) - Ensure allowlisting API is called before priority string is constructed (#2042532) - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490) * Tue Feb 22 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-6 - Compile out GOST algorithm IDs (#1945292) * Thu Feb 17 2022 Zoltan Fridrich <zfridric@redhat.com> - 3.7.3-5 - Fix upstream testsuite in fips mode (#2051637) * Wed Feb 16 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-4 - Specify FIPS140-3 module name and version - fips: allow a few more primes in RSA key generation - fips: tighten PKCS#12 algorithm checks - Correct return value of KTLS stub API * Tue Feb 15 2022 Zoltan Fridrich <zfridric@redhat.com> - 3.7.3-3 - Disable config reload in order to not break allowlisting (#2042532) * Wed Feb 02 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-2 - Build with TPM2 support, patch from Alexander Sosedkin (#2033220) * Tue Jan 18 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-1 - Update to gnutls 3.7.3 (#2033220) * Wed Dec 22 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-10 - Update gnutls_{hash,hmac}_copy man-pages as well (#1999639) * Wed Dec 22 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-9 - Drop support for GNUTLS_NO_EXPLICIT_INIT envvar in favor of GNUTLS_NO_IMPLICIT_INIT (#1999639) - Expand documentation of gnutls_{hash,hmac}_copy, mentioning that those do not always work (#1999639) * Tue Dec 21 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-9 - Fix race condition when resolving SYSTEM priority in allowlisting mode (#2012249) * Thu Oct 21 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-8 - Fix issues in bundled libopts, spotted by covscan (#1938730) * Tue Oct 12 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-7 - Enable Intel CET - Remove unnecessary CCASFLAGS setting for annocheck * Thu Aug 19 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-6 - Reorder doc/invoke-*.texi generation (#1975482) - Temporarily disable LTO for aarch64 and ppc64le * Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 3.7.2-5 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 * Mon Aug 02 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-4 - Disable GOST cryptography by default (#1945292) - Tighten timestamp adjustment when not bootstrapping (#1975482) - Re-enable LTO (#1986143) * Mon Jun 28 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-3 - Enable allowlisting configuration mode (#1975421) * Sat Jun 26 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-2 - Remove %defattr invocations which are no longer necessary - libpkcs11mock1.* is not installed anymore - hobble-gnutls: Remove SRP removal - Use correct source URL - Switch to using %gpgverify macro * Fri Jun 25 2021 Daiki Ueno <dueno@redhat.com> - 3.7.2-1 - Update to upstream 3.7.2 release (#1966479) * Tue Jun 22 2021 Mohan Boddu <mboddu@redhat.com> - 3.7.1-6 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 * Thu Jun 03 2021 Daiki Ueno <dueno@redhat.com> - 3.7.1-5 - Fix typo in TPM 1.2 disablement (#1927370) * Thu May 27 2021 Daiki Ueno <dueno@redhat.com> - 3.7.1-4 - Disable TPM support by default (#1927370) * Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 3.7.1-3 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 * Tue Mar 16 2021 Daiki Ueno <dueno@redhat.com> - 3.7.1-2 - Restore fipscheck dependency * Sat Mar 13 2021 Daiki Ueno <dueno@redhat.com> - 3.7.1-1 - Update to upstream 3.7.1 release - Remove fipscheck dependency, as it is now calculated with an internal tool * Fri Mar 05 2021 Daiki Ueno <dueno@redhat.com> - 3.7.0-4 - Tolerate duplicate certs in the chain also with PKCS #11 trust store * Tue Mar 02 2021 Daiki Ueno <dueno@redhat.com> - 3.7.0-3 - Reduce BRs for non-bootstrapping build |
