summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSimone Weiß <simone.p.weiss@posteo.com>2024-03-11 16:39:54 +0800
committerSteve Sakoman <steve@sakoman.com>2024-03-16 08:33:21 -1000
commitc9834bf620885c0570e68187f270aa29dc81af9f (patch)
tree70d89d2da91cbfde85be2e1040d3d35e0dc870cd
parentc557cb4f0242d047ca4e9b8f2b56a89bc5fbc7f1 (diff)
downloadpoky-c9834bf620885c0570e68187f270aa29dc81af9f.tar.gz
gnutls: Upgrade 3.8.2 -> 3.8.3
Upgrade version to adress recent CVE findings. Changelog ========= ** libgnutls: Fix more timing side-channel inside RSA-PSK key exchange [GNUTLS-SA-2024-01-14, CVSS: medium] [CVE-2024-0553] ** libgnutls: Fix assertion failure when verifying a certificate chain with a cycle of cross signatures [GNUTLS-SA-2024-01-09, CVSS: medium] [CVE-2024-0567] ** libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 token certtool was unable to handle Ed25519 keys generated on PKCS#11 with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2. (cherry-pick from Oe-Core rev 705d2972b38efc9f331e3635c07ca92f8812b365) (From OE-Core rev: f40a53370eac89df38b2fab47c411a61d4df4fc0) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
-rw-r--r--meta/recipes-support/gnutls/gnutls_3.8.3.bb (renamed from meta/recipes-support/gnutls/gnutls_3.8.2.bb)2
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/recipes-support/gnutls/gnutls_3.8.2.bb b/meta/recipes-support/gnutls/gnutls_3.8.3.bb
index 43fb5c4c4e..27d6753be0 100644
--- a/meta/recipes-support/gnutls/gnutls_3.8.2.bb
+++ b/meta/recipes-support/gnutls/gnutls_3.8.3.bb
@@ -25,7 +25,7 @@ SRC_URI = "https://www.gnupg.org/ftp/gcrypt/gnutls/v${SHRT_VER}/gnutls-${PV}.tar
25 file://Add-ptest-support.patch \ 25 file://Add-ptest-support.patch \
26 " 26 "
27 27
28SRC_URI[sha256sum] = "e765e5016ffa9b9dd243e363a0460d577074444ee2491267db2e96c9c2adef77" 28SRC_URI[sha256sum] = "f74fc5954b27d4ec6dfbb11dea987888b5b124289a3703afcada0ee520f4173e"
29 29
30inherit autotools texinfo pkgconfig gettext lib_package gtk-doc ptest 30inherit autotools texinfo pkgconfig gettext lib_package gtk-doc ptest
31 31