[ol8_u4_security_validation] gnutls-dane-10:3.6.16-8.el8_9.3_fips.aarch64

Name:	gnutls-dane
Epoch:	10
Version:	3.6.16
Release:	8.el8_9.3_fips
Architecture:	aarch64
Group:	System Environment/Libraries
Size:	70520
License:	GPLv3+ and LGPLv2+
RPM:	gnutls-dane-3.6.16-8.el8_9.3_fips.aarch64.rpm
Source RPM:	gnutls-3.6.16-8.el8_9.3_fips.src.rpm
Build Date:	Fri Apr 12 2024
Build Host:	build-ol8-aarch64.oracle.com
Vendor:	Oracle America
URL:	http://www.gnutls.org/
Summary:	A DANE protocol implementation for GnuTLS
Description:	GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package contains library that implements the DANE protocol for verifying TLS certificates through DNSSEC.

Changelog (Show File list) (Show related packages)

Thu Apr 11 2024 John McWalters <john.mcwalters@oracle.com> - 3.6.16-8.3_fips

- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10_fips

Tue Mar 26 2024 Daiki Ueno <dueno@redhat.com> - 3.6.16-8.3
```
- Fix memleak with older GMP (RHEL-28957)
```

Mon Mar 25 2024 Daiki Ueno <dueno@redhat.com> - 3.6.16-8.2

- Fix timing side-channel in deterministic ECDSA (RHEL-28957)

Thu Jan 18 2024 Daiki Ueno <dueno@redhat.com> - 3.6.16-8.1

- auth/rsa-psk: minimize branching after decryption (RHEL-21586)

Wed Dec 06 2023 Daiki Ueno <dueno@redhat.com> - 3.6.16-8

- auth/rsa_psk: side-step potential side-channel (RHEL-16753)

Mon Jun 26 2023 Daiki Ueno <dueno@redhat.com> - 3.6.16-7

- Clear server's session ticket indication at rehandshake (#2089817)

Thu Feb 23 2023 Zoltan Fridrich <zfridric@redhat.com> - 3.6.16-6

- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)

Mon Aug 29 2022 Daiki Ueno <dueno@redhat.com> - 3.6.16-5
```
- Fix double-free in gnutls_pkcs7_verify (#2109788)
```

Mon Jun 28 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-4

- p11tool: Document ID reuse behavior when importing certs (#1776250)

Mon Jun 07 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-3

- Treat SHA-1 signed CA in the trusted set differently (#1965445)