[ol8_u4_security_validation] gnutls-10:3.6.16-4.0.1.el8_fips.x86_64

Name:	gnutls
Epoch:	10
Version:	3.6.16
Release:	4.0.1.el8_fips
Architecture:	x86_64
Group:	System Environment/Libraries
Size:	3012023
License:	GPLv3+ and LGPLv2+
RPM:	gnutls-3.6.16-4.0.1.el8_fips.x86_64.rpm
Source RPM:	gnutls-3.6.16-4.0.1.el8_fips.src.rpm
Build Date:	Tue Mar 15 2022
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.gnutls.org/
Summary:	A TLS protocol implementation
Description:	GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures.

Changelog (Show File list) (Show related packages)

Tue Dec 07 2021 Ilya Okomin <ilya.okomin@oracle.com> - 3.6.16-4.0.1_fips

- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10

Mon Jun 28 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-4

- p11tool: Document ID reuse behavior when importing certs (#1776250)

Mon Jun 07 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-3

- Treat SHA-1 signed CA in the trusted set differently (#1965445)

Wed May 26 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-2

- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)

Mon May 24 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-1

- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)

Thu Apr 01 2021 Daiki Ueno <dueno@redhat.com> - 3.6.14-10

- Port fixes for potential miscalculation in ecdsa_verify (#1942931)

Tue Nov 24 2020 Daiki Ueno <dueno@redhat.com> - 3.6.14-9
```
- Revert the previous change
```
Wed Nov 11 2020 Daiki Ueno <dueno@redhat.com> - 3.6.14-8
```
- Depend on specific NVR of gmp and nettle (#1812933)
```

Tue Nov 03 2020 Daiki Ueno <dueno@redhat.com> - 3.6.14-7

- Increase DH key bits to >= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)

Mon Aug 24 2020 Daiki Ueno <dueno@redhat.com> - 3.6.14-6
```
- Fix memory leak when serializing iovec_t (#1844112)
```