[ol8_u4_security_validation] gnutls-dane-10:3.6.16-8.el8_9.3_fips.i686

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS
protocols and technologies around them. It provides a simple C language
application programming interface (API) to access the secure communications
protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and
other required structures.
This package contains library that implements the DANE protocol for verifying
TLS certificates through DNSSEC.

Changelog (Show File list) (Show related packages)

• Thu Apr 11 2024 John McWalters <john.mcwalters@oracle.com> - 3.6.16-8.3_fips

  - Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
    as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
  - Allow bigger known RSA modulus sizes when calling
    rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
  - Change Epoch from 1 to 10_fips

• Tue Mar 26 2024 Daiki Ueno <dueno@redhat.com> - 3.6.16-8.3

  - Fix memleak with older GMP (RHEL-28957)

• Mon Mar 25 2024 Daiki Ueno <dueno@redhat.com> - 3.6.16-8.2

  - Fix timing side-channel in deterministic ECDSA (RHEL-28957)

• Thu Jan 18 2024 Daiki Ueno <dueno@redhat.com> - 3.6.16-8.1

  - auth/rsa-psk: minimize branching after decryption (RHEL-21586)

• Wed Dec 06 2023 Daiki Ueno <dueno@redhat.com> - 3.6.16-8

  - auth/rsa_psk: side-step potential side-channel (RHEL-16753)

• Mon Jun 26 2023 Daiki Ueno <dueno@redhat.com> - 3.6.16-7

  - Clear server's session ticket indication at rehandshake (#2089817)

• Thu Feb 23 2023 Zoltan Fridrich <zfridric@redhat.com> - 3.6.16-6

  - Fix x86_64 CPU feature detection when AVX is not available (#2131152)
  - Fix timing side-channel in TLS RSA key exchange (#2162598)

• Mon Aug 29 2022 Daiki Ueno <dueno@redhat.com> - 3.6.16-5

  - Fix double-free in gnutls_pkcs7_verify (#2109788)

• Mon Jun 28 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-4

  - p11tool: Document ID reuse behavior when importing certs (#1776250)

• Mon Jun 07 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-3

  - Treat SHA-1 signed CA in the trusted set differently (#1965445)