[ol9_appstream] gnutls-dane-3.7.6-12.el9_0.x86_64

Name:	gnutls-dane
Version:	3.7.6
Release:	12.el9_0
Architecture:	x86_64
Group:	Unspecified
Size:	28532
License:	GPLv3+ and LGPLv2+
RPM:	gnutls-dane-3.7.6-12.el9_0.x86_64.rpm
Source RPM:	gnutls-3.7.6-12.el9_0.src.rpm
Build Date:	Tue Oct 11 2022
Build Host:	build-ol9-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.gnutls.org/
Summary:	A DANE protocol implementation for GnuTLS
Description:	GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package contains library that implements the DANE protocol for verifying TLS certificates through DNSSEC.

Changelog (Show File list) (Show related packages)

Tue Sep 27 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-12

- fips: mark PBKDF2 with short key and output sizes non-approved
- fips: only mark HMAC as approved in PBKDF2
- fips: mark gnutls_key_generate with short key sizes non-approved
- fips: fix checking on hash algorithm used in ECDSA
- fips: preserve operation context around FIPS selftests API

Fri Aug 26 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-11
```
- Supply --with{,out}-{zlib,brotli,zstd} explicitly
```

Thu Aug 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-10

- Revert nettle version pinning as it doesn't work well in side-tag

Thu Aug 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-9

- Pin nettle version in Requires when compiled with FIPS

Tue Aug 23 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-8

- Bundle GMP to privatize memory functions
- Disable certificate compression support by default

Tue Aug 23 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-7
```
- Update gnutls-3.7.6-cpuid-fixes.patch
```

Sat Aug 20 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-6

- Mark RSA SigVer operation approved for known modulus sizes (#2119770)
- accelerated: clear AVX bits if it cannot be queried through XSAVE

Thu Aug 04 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-5

- Block DES-CBC usage in decrypting PKCS#12 bag under FIPS (#2115314)
- sysrng: reseed source DRBG for prediction resistance

Fri Jul 29 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-4

- Make gnutls-cli work with KTLS for testing
- Fix double-free in gnutls_pkcs7_verify (#2109789)

Mon Jul 25 2022 Daiki Ueno <dueno@redhat.com> - 3.7.6-3

- Limit input size for AES-GCM according to SP800-38D (#2108635)
- Do not treat GPG verification errors as fatal
- Remove gnutls-3.7.6-libgnutlsxx-const.patch