Information for build gnutls-3.7.6-23.el9_3.3
| ID | 30599 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Package Name | gnutls | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Version | 3.7.6 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Release | 23.el9_3.3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Epoch | Draft | False | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Source | git+https://git.cclinux.org/stage/rpms/gnutls.git#e670564f7fa8f1987bb3256c2f1bb14b1b94c64f | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Summary | A TLS protocol implementation | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Description | GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Built by | distrobuild | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| State | complete | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Volume | DEFAULT | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Started | Sun, 28 Jul 2024 07:35:59 CST | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Completed | Sun, 28 Jul 2024 08:01:11 CST | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Task | build (dist-circle9_3-updates, /stage/rpms/gnutls.git:e670564f7fa8f1987bb3256c2f1bb14b1b94c64f) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Extra | {'source': {'original_url': 'git+https://git.cclinux.org/stage/rpms/gnutls.git?#e670564f7fa8f1987bb3256c2f1bb14b1b94c64f'}} | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Tags |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| RPMs |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Logs | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Changelog | * Wed Jan 17 2024 Daiki Ueno <dueno@redhat.com> - 3.7.6-23.3 - x509: detect loop in certificate chain (RHEL-21759) - fips: Zeroize temporary values in integrity check (RHEL-21870) * Wed Jan 10 2024 Daiki Ueno <dueno@redhat.com> - 3.7.6-23.2 - auth/rsa_psk: minimize branching after decryption * Mon Dec 11 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-23.1 - auth/rsa_psk: side-step potential side-channel (RHEL-16755) * Sat Jul 29 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-23 - Mark SHA-1 signature verification non-approved in FIPS (#2102751) * Tue Jul 18 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-22 - Skip KTLS test on old kernel if host and target arches are different * Thu Jul 13 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-21 - Require use of extended master secret in FIPS mode by default (#2157953) * Tue Mar 14 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-20 - Fix the previous change (#2175214) * Fri Mar 10 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-19 - Bump release to ensure el9 package is greater than el9_* packages (#2175214) * Tue Feb 28 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-18 - Update gnutls-3.7.8-fips-pct-dh.patch to the upstream version (#2168143) * Fri Feb 10 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-17 - Fix timing side-channel in TLS RSA key exchange (#2162601) * Fri Feb 10 2023 Daiki Ueno <dueno@redhat.com> - 3.7.6-16 - fips: extend PCT to DH key generation (#2168143) * Thu Dec 15 2022 Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-15 - fips: rename hmac file to its previous name (#2148269) * Tue Nov 22 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-14 - cipher: add restriction on CCM tag length under FIPS mode (#2137807) - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266) * Tue Nov 15 2022 Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-13 - fips: make XTS key check failure not fatal (#2130971) - enable source archive verification again (#2127094) - clear server's session ticket indication at rehandshake (#2136072) - crypto-api: add block cipher API with automatic padding (#2084161) - fips: remove library path checking from FIPS integrity check (#2140908) * Tue Sep 27 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-12 - fips: mark PBKDF2 with short key and output sizes non-approved - fips: only mark HMAC as approved in PBKDF2 - fips: mark gnutls_key_generate with short key sizes non-approved - fips: fix checking on hash algorithm used in ECDSA - fips: preserve operation context around FIPS selftests API * Fri Aug 26 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-11 - Supply --with{,out}-{zlib,brotli,zstd} explicitly * Thu Aug 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-10 - Revert nettle version pinning as it doesn't work well in side-tag * Thu Aug 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-9 - Pin nettle version in Requires when compiled with FIPS * Tue Aug 23 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-8 - Bundle GMP to privatize memory functions - Disable certificate compression support by default * Tue Aug 23 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-7 - Update gnutls-3.7.6-cpuid-fixes.patch * Sat Aug 20 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-6 - Mark RSA SigVer operation approved for known modulus sizes (#2091903) - accelerated: clear AVX bits if it cannot be queried through XSAVE * Thu Aug 04 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-5 - Block DES-CBC usage in decrypting PKCS#12 bag under FIPS (#2115244) - sysrng: reseed source DRBG for prediction resistance * Fri Jul 29 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-4 - Make gnutls-cli work with KTLS for testing - Fix double-free in gnutls_pkcs7_verify (#2109790) * Mon Jul 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-3 - Limit input size for AES-GCM according to SP800-38D (#2095251) - Do not treat GPG verification errors as fatal - Remove gnutls-3.7.6-libgnutlsxx-const.patch * Tue Jul 19 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-2 - Allow enabling KTLS with config file (#2042009) * Fri Jul 01 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-1 - Update to gnutls 3.7.6 (#2097327) * Thu Mar 31 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-10 - Use only the first component of VERSION from /etc/os-release (#2070249) - Don't run power-on self-tests on DSA (#2061325) * Fri Feb 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-9 - Stop using typeof keyword for tss2 function prototypes (#2057490) - Ensure allowlist API is called before priority string construction (#1975421) * Thu Feb 24 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-8 - Fix previous change for loading libtss2* (#2057490) * Wed Feb 23 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-7 - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220) - Ensure allowlisting API is called before priority string is constructed (#2042532) - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490) * Tue Feb 22 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-6 - Compile out GOST algorithm IDs (#1945292) * Thu Feb 17 2022 Zoltan Fridrich <zfridric@redhat.com> - 3.7.3-5 - Fix upstream testsuite in fips mode (#2051637) * Wed Feb 16 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-4 - Specify FIPS140-3 module name and version - fips: allow a few more primes in RSA key generation - fips: tighten PKCS#12 algorithm checks - Correct return value of KTLS stub API * Tue Feb 15 2022 Zoltan Fridrich <zfridric@redhat.com> - 3.7.3-3 - Disable config reload in order to not break allowlisting (#2042532) * Wed Feb 02 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-2 - Build with TPM2 support, patch from Alexander Sosedkin (#2033220) * Tue Jan 18 2022 Daiki Ueno <dueno@redhat.com> - 3.7.3-1 - Update to gnutls 3.7.3 (#2033220) |
