Fedora 20 Update: mingw-gnutls-3.1.23-1.fc20

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-5354
2014-04-18 14:26:09
--------------------------------------------------------------------------------

Name        : mingw-gnutls
Product     : Fedora 20
Version     : 3.1.23
Release     : 1.fc20
URL         : http://www.gnutls.org/
Summary     : MinGW GnuTLS TLS/SSL encryption library
Description :
GnuTLS TLS/SSL encryption library.  This library is cross-compiled
for MinGW.

--------------------------------------------------------------------------------
Update Information:

Version 3.1.23 (released 2014-04-07)

* libgnutls: Ciphersuites that use the SHA256 or SHA384 MACs are only available in TLS 1.0 as SSL 3.0 doesn't specify parameters for these algorithms.

* libgnutls: gnutls_record_send is now safe to be called under DTLS when in corked mode.

* libgnutls: Changed the behaviour in wildcard acceptance in certificates. Wildcards are only accepted when there are more than two domain components after the wildcard. This drops support for the permissive RFC2818 wildcards and adds more conservative support based on the suggestions in RFC6125. Suggested by Jeffrey Walton.

* certtool: When no password is provided to export a PKCS #8 keys, do not encrypt by default. This reverts to the certtool behavior of gnutls 3.0. The previous behavior of encrypting using an empty password can be replicating using the new parameter --empty-password.

* p11tool: Avoid dual initialization of the PKCS #11 subsystem when the --provider option is given.

--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 17 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.23-1
- Update to 3.1.23
* Tue Mar  4 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.22-1
- Update to 3.1.22
- Fixes CVE-2014-0092 and CVE-2014-1959
* Thu Feb 13 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.21-1
- Update to 3.1.21
* Sun Jan 26 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.18-1
- Update to 3.1.18
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update mingw-gnutls' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------