[ol7_latest_archive] gnutls-3.3.8-14.el7_2.i686

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS
protocols and technologies around them. It provides a simple C language
application programming interface (API) to access the secure communications
protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and
other required structures.

Changelog (Show File list) (Show related packages)

• Wed Dec 09 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-14

  - Prevent downgrade attack to RSA-MD5 in server key exchange.

• Fri Jun 05 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13

  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)

• Mon Jan 05 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12

  - corrected fix of handshake buffer resets (#1153106)

• Thu Dec 11 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11

  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)

• Tue Dec 02 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10

  - Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)

• Tue Nov 18 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9

  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)

• Thu Nov 13 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8

  - Applied fix for FIPS enforcement issue when only /etc/system-fips
    existed (#1163848)

• Fri Nov 07 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7

  - Applied fix for CVE-2014-8564 (#1161473)

• Wed Oct 29 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6

  - when generating test DH keys, enforce the q_bits.

• Tue Oct 21 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5

  - do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)