Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
MIME-Version: 1.0
Date: Fri, 14 Aug 2015 11:48:55 +0000
From: "Thomas Klausner" <wiz@netbsd.org>
Subject: CVS commit: pkgsrc/security/gnutls
To: pkgsrc-changes@NetBSD.org
Reply-To: wiz@netbsd.org
Message-Id: <20150814114855.C5C4D98@cvs.netbsd.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

Module Name:	pkgsrc
Committed By:	wiz
Date:		Fri Aug 14 11:48:55 UTC 2015

Modified Files:
	pkgsrc/security/gnutls: Makefile distinfo
	pkgsrc/security/gnutls/patches: patch-tests_Makefile.in

Log Message:
Update to 3.17.1:

* Version 3.3.17 (released 2015-08-10)

** libgnutls: Fix issue with server side sending the status request
   extension even when not requested. Reported by Jeremy Harris.

** libgnutls: gnutls_pkcs11_privkey_generate2() will store the generated
   public key, unless the GNUTLS_PKCS11_OBJ_FLAG_NO_STORE_PUBKEY flag is
   specified.

** libgnutls: fixed double free in DN decoding [GNUTLS-SA-2015-3].

** API and ABI modifications:
   No changes since last version.

* Version 3.3.16 (released 2015-07-12)

** libgnutls: Allow compilation with nettle 3.0 or later

** libgnutls: corrected failure when importing plain files
   with gnutls_x509_privkey_import2(), and a password was provided.

** libgnutls: Don't reject certificates if a CA has the URI or IP address
   name constraints, and the end certificate doesn't have an IP address
   name or a URI set.

** libgnutls: set and read the hint in DHE-PSK and ECDHE-PSK ciphersuites.

** API and ABI modifications:
   No changes since last version.


To generate a diff of this commit:
cvs rdiff -u -r1.155 -r1.156 pkgsrc/security/gnutls/Makefile
cvs rdiff -u -r1.115 -r1.116 pkgsrc/security/gnutls/distinfo
cvs rdiff -u -r1.4 -r1.5 \
    pkgsrc/security/gnutls/patches/patch-tests_Makefile.in

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.