summaryrefslogtreecommitdiffstats
path: root/meta
diff options
context:
space:
mode:
authorwangmy <wangmy@fujitsu.com>2022-10-11 15:58:10 +0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2022-11-04 23:31:49 +0000
commitb1b1c9232f2a14fec446476edd0e74cf863c1ead (patch)
tree6558b148db6af5b6c748b01971ccf339587e5b91 /meta
parentcc4b3a0040234b9fa30ed3fe7a8d068ed53192bc (diff)
downloadpoky-b1b1c9232f2a14fec446476edd0e74cf863c1ead.tar.gz
gnutls: upgrade 3.7.7 -> 3.7.8
Changelog: ========= ** libgnutls: In FIPS140 mode, RSA signature verification is an approved operation if the key has modulus with known sizes (1024, 1280, 1536, and 1792 bits), in addition to any modulus sizes larger than 2048 bits, according to SP800-131A rev2. ** libgnutls: gnutls_session_channel_binding performs additional checks when GNUTLS_CB_TLS_EXPORTER is requested. According to RFC9622 4.2, the "tls-exporter" channel binding is only usable when the handshake is bound to a unique master secret (i.e., either TLS 1.3 or extended master secret extension is negotiated). Otherwise the function now returns error. ** libgnutls: usage of the following functions, which are designed to loosen restrictions imposed by allowlisting mode of configuration, has been additionally restricted. Invoking them is now only allowed if system-wide TLS priority string has not been initialized yet: gnutls_digest_set_secure gnutls_sign_set_secure gnutls_sign_set_secure_for_certs gnutls_protocol_set_enabled (From OE-Core rev: a583ac20cc82ede59e1a4e30708cf5434b49ce37) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 858886aa07d0c2c2ef2489996cc8eca5fbe931fa) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta')
-rw-r--r--meta/recipes-support/gnutls/gnutls_3.7.8.bb (renamed from meta/recipes-support/gnutls/gnutls_3.7.7.bb)2
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/recipes-support/gnutls/gnutls_3.7.7.bb b/meta/recipes-support/gnutls/gnutls_3.7.8.bb
index c7d782e4eb..8f979a5b99 100644
--- a/meta/recipes-support/gnutls/gnutls_3.7.7.bb
+++ b/meta/recipes-support/gnutls/gnutls_3.7.8.bb
@@ -24,7 +24,7 @@ SRC_URI = "https://www.gnupg.org/ftp/gcrypt/gnutls/v${SHRT_VER}/gnutls-${PV}.tar
24 file://0001-Creating-.hmac-file-should-be-excuted-in-target-envi.patch \ 24 file://0001-Creating-.hmac-file-should-be-excuted-in-target-envi.patch \
25 " 25 "
26 26
27SRC_URI[sha256sum] = "be9143d0d58eab64dba9b77114aaafac529b6c0d7e81de6bdf1c9b59027d2106" 27SRC_URI[sha256sum] = "c58ad39af0670efe6a8aee5e3a8b2331a1200418b64b7c51977fb396d4617114"
28 28
29inherit autotools texinfo pkgconfig gettext lib_package gtk-doc 29inherit autotools texinfo pkgconfig gettext lib_package gtk-doc
30 30