Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1712307093294490"
MIME-Version: 1.0
Date: Fri, 5 Apr 2024 08:51:33 +0000
From: "Adam Ciarcinski" <adam@netbsd.org>
Subject: CVS commit: pkgsrc/security/gnutls
To: pkgsrc-changes@NetBSD.org
Reply-To: adam@netbsd.org
Message-Id: <20240405085133.27F24FA2C@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

This is a multi-part message in MIME format.

--_----------=_1712307093294490
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"

Module Name:	pkgsrc
Committed By:	adam
Date:		Fri Apr  5 08:51:33 UTC 2024

Modified Files:
	pkgsrc/security/gnutls: Makefile distinfo

Log Message:
gnutls: updated to 3.8.5

Version 3.8.5 (released 2024-04-04)

** libgnutls: Due to majority of usages and implementations of
   RSA decryption with PKCS#1 v1.5 padding being incorrect,
   leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5
   is being deprecated (encryption and decryption) and will be
   disabled in the future. A new option `allow-rsa-pkcs1-encrypt`
   has been added into the system-wide library configuration which
   allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the
   RSAES-PKCS1-v1_5 is enabled by default.

** libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for
   backward compatibility with GCR.

** libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1
   v1.5 decryption error handling and deterministic ECDSA with earlier
   versions of GMP.  These were a regression introduced in the 3.8.4
   release.

** build: Fixed a bug where building gnutls statically failed due
   to a duplicate definition of nettle_rsa_compute_root_tr().

** API and ABI modifications:
GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t


To generate a diff of this commit:
cvs rdiff -u -r1.247 -r1.248 pkgsrc/security/gnutls/Makefile
cvs rdiff -u -r1.161 -r1.162 pkgsrc/security/gnutls/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_1712307093294490
Content-Disposition: inline
Content-Length: 1644
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/security/gnutls/Makefile
diff -u pkgsrc/security/gnutls/Makefile:1.247 pkgsrc/security/gnutls/Makefile:1.248
--- pkgsrc/security/gnutls/Makefile:1.247	Thu Mar 21 06:08:38 2024
+++ pkgsrc/security/gnutls/Makefile	Fri Apr  5 08:51:32 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.247 2024/03/21 06:08:38 adam Exp $
+# $NetBSD: Makefile,v 1.248 2024/04/05 08:51:32 adam Exp $
 
-DISTNAME=	gnutls-3.8.4
+DISTNAME=	gnutls-3.8.5
 CATEGORIES=	security devel
 MASTER_SITES=	https://www.gnupg.org/ftp/gcrypt/gnutls/v${PKGVERSION_NOREV:R}/
 EXTRACT_SUFX=	.tar.xz

Index: pkgsrc/security/gnutls/distinfo
diff -u pkgsrc/security/gnutls/distinfo:1.161 pkgsrc/security/gnutls/distinfo:1.162
--- pkgsrc/security/gnutls/distinfo:1.161	Thu Mar 21 06:08:38 2024
+++ pkgsrc/security/gnutls/distinfo	Fri Apr  5 08:51:32 2024
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.161 2024/03/21 06:08:38 adam Exp $
+$NetBSD: distinfo,v 1.162 2024/04/05 08:51:32 adam Exp $
 
-BLAKE2s (gnutls-3.8.4.tar.xz) = b6849ece462ad2ee2331760ff5743ee9dabb40dcb133ca0a7e3615f28bf0048f
-SHA512 (gnutls-3.8.4.tar.xz) = af748610392b7eec8a6294d28d088f323450207cdcda1aa2138a0fd71023994c662f7aff72b2b3cd888e7b770750611981c2cde5f2ddc45f852fc0034cdebaff
-Size (gnutls-3.8.4.tar.xz) = 6487520 bytes
+BLAKE2s (gnutls-3.8.5.tar.xz) = 05e94cba94e18302ddc310a8a573eb0db1cf4796f9621da71076106946b2937a
+SHA512 (gnutls-3.8.5.tar.xz) = 4bac1aa7ec1dce9b3445cc515cc287a5af032d34c207399aa9722e3dc53ed652f8a57cfbc9c5e40ccc4a2631245d89ab676e3ba2be9563f60ba855aaacb8e23c
+Size (gnutls-3.8.5.tar.xz) = 6491504 bytes
 SHA1 (patch-configure) = 866d8a365b8338348230e47518788f494279b139


--_----------=_1712307093294490--