Commit Graph

18 Commits

Author SHA1 Message Date
Gustavo Zacarias
f8799db790 gnutls: bump to version 3.4.12
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-05-22 21:35:39 +02:00
Gustavo Zacarias
41fef2ce8d gnutls: bump to version 3.4.11
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-04-13 21:40:08 +02:00
Gustavo Zacarias
726f8f2f40 gnutls: bump to version 3.4.10
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-03-03 15:00:43 +01:00
Gustavo Zacarias
be8ae9330b gnutls: bump to version 3.4.9
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-02-03 23:16:25 +01:00
Gustavo Zacarias
9bff092e29 gnutls: bump to version 3.4.8
Patch now upstream, so drop it along autoreconf and gettextize.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-01-08 18:30:23 +01:00
Gustavo Zacarias
01e3d2eff1 gnutls: bump to version 3.4.7
The 3.4 series has been promoted to stable.
Handle autodeps more concisely (idn, p11-kit, zlib).
libtasn1 is now mandatory, since otherwise gnutls uses the bundled
version it makes no sense to try that because of target duplication.
Disable tpm support since we've got no trousers package.
Disable libdane support since we've got no dane package.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-12-01 17:52:28 +01:00
Gustavo Zacarias
5517c1b27f gnutls: bump to version 3.3.19
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-11-23 18:35:48 +01:00
Gustavo Zacarias
d36ed1a7b8 gnutls: bump to version 3.3.18
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-09-13 20:01:22 +02:00
Gustavo Zacarias
7c8c18a616 gnutls: security bump to version 3.3.17.1
Fixes GNUTLS-SA-2015-3 - Double free in certificate DN decoding.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-08-18 13:07:52 +02:00
Gustavo Zacarias
adddac4558 gnutls: bump to version 3.3.16
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-13 17:08:03 +02:00
Gustavo Zacarias
c1b0a0dc56 gnutls: security bump to version 3.3.15
Fixes:
GNUTLS-SA-2015-2 - Fix for MD5 downgrade in TLS 1.2 signatures.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-05-04 14:35:21 +02:00
Gustavo Zacarias
552399dbf6 gnutls: security bump to version 3.3.14
Fixes a two-byte stack overflow in DTLS 0.9 protocol (no CVE assigned
yet).

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-30 17:57:49 +02:00
Gustavo Zacarias
681a90f746 gnutls: bump to version 3.3.13
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-02-26 22:24:24 +01:00
Gustavo Zacarias
becc095282 gnutls: bump to version 3.3.12
This is the new stable, so switch to it.
Still no dice with nettle 3.0, see:
http://lists.gnutls.org/pipermail/gnutls-devel/2014-June/006977.html
and nettle upstream:
http://lists.lysator.liu.se/pipermail/nettle-bugs/2014/003129.html

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-01-20 00:41:55 +01:00
Gustavo Zacarias
733700cff7 gnutls: bump to version 3.2.21
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-11 19:49:38 +01:00
Gustavo Zacarias
caf2b2ba6b gnutls: security bump to version 3.2.20
Fixes:
CVE-2014-8564 / GNUTLS-SA-2014-5 - Sean Burford reported that the
encoding of elliptic curves parameters GnuTLS 3 is vulnerable to a
denial of service (heap corruption). It affects clients and servers
which print information about the peer's certificate, e.g., the key ID,
and can be exploited via a specially crafted X.509 certificate.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-11-10 14:13:49 +01:00
Gustavo Zacarias
8465d7ecfc gnutls: bump to version 3.2.19
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-10-14 17:27:45 +02:00
Gustavo Zacarias
2e849bd9b6 gnutls: bump to version 3.2.18
Also add hash, calculated on downloaded file after verifying signature.

[Peter: tweak hash comment]
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-09-18 22:02:09 +02:00