[ol8_u4_security_validation] gnutls-utils-10:3.6.16-5.el8_6_fips.x86_64

Name:	gnutls-utils
Epoch:	10
Version:	3.6.16
Release:	5.el8_6_fips
Architecture:	x86_64
Group:	Applications/System
Size:	1517675
License:	GPLv3+
RPM:	gnutls-utils-3.6.16-5.el8_6_fips.x86_64.rpm
Source RPM:	gnutls-3.6.16-5.el8_6_fips.src.rpm
Build Date:	Fri Mar 24 2023
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.gnutls.org/
Summary:	Command line tools for TLS protocol
Description:	GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package contains command line TLS client and server and certificate manipulation tools.

Changelog (Show File list) (Show related packages)

Fri Mar 24 2023 Alan Steinberg <alan.steinberg@oracle.com> - 3.6.16-5_fips

- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10

Mon Aug 29 2022 Daiki Ueno <dueno@redhat.com> - 3.6.16-5
```
- Fix double-free in gnutls_pkcs7_verify (#2109787)
```

Mon Jun 28 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-4

- p11tool: Document ID reuse behavior when importing certs (#1776250)

Mon Jun 07 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-3

- Treat SHA-1 signed CA in the trusted set differently (#1965445)

Wed May 26 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-2

- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)

Mon May 24 2021 Daiki Ueno <dueno@redhat.com> - 3.6.16-1

- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)

Thu Apr 01 2021 Daiki Ueno <dueno@redhat.com> - 3.6.14-10

- Port fixes for potential miscalculation in ecdsa_verify (#1942931)

Tue Nov 24 2020 Daiki Ueno <dueno@redhat.com> - 3.6.14-9
```
- Revert the previous change
```
Wed Nov 11 2020 Daiki Ueno <dueno@redhat.com> - 3.6.14-8
```
- Depend on specific NVR of gmp and nettle (#1812933)
```

Tue Nov 03 2020 Daiki Ueno <dueno@redhat.com> - 3.6.14-7

- Increase DH key bits to >= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)