Fedora 20 Update: mingw-gnutls-3.1.26-1.fc20

updates at fedoraproject.org updates at fedoraproject.org
Tue Sep 9 22:09:20 UTC 2014


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9863
2014-08-28 14:40:22
--------------------------------------------------------------------------------

Name        : mingw-gnutls
Product     : Fedora 20
Version     : 3.1.26
Release     : 1.fc20
URL         : http://www.gnutls.org/
Summary     : MinGW GnuTLS TLS/SSL encryption library
Description :
GnuTLS TLS/SSL encryption library.  This library is cross-compiled
for MinGW.

--------------------------------------------------------------------------------
Update Information:

Version 3.1.26 (released 2014-08-24)

* libgnutls: Do not call the post client hello callback twice when resuming using session tickets.

* libgnutls: When the decoding of a printable DN element fails, then treat it as unknown and print its hex value rather than failing. That works around an issue in a TURKTRST root certificate which improperly encodes the X520countryName element.

* libgnutls: initialize parameters variable on PKCS #8 decryption.

* libgnutls: gnutls_pkcs12_verify_mac() will not fail in other than SHA1 algorithms.

* libgnutls: when checking the hostname of a certificate with multiple CNs ensure that the "most specific" CN is being used.

* libgnutls: In DTLS ignore only errors that relate to unexpected packets and decryption failures.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Aug 26 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.26-1
- Update to 3.1.26
* Sat May 31 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.25-1
- Update to 3.1.25
- Fixes CVE-2014-3466 (#1103047)
* Mon May 26 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.24-1
- Update to 3.1.24
* Thu Apr 17 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.23-1
- Update to 3.1.23
* Tue Mar  4 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.22-1
- Update to 3.1.22
- Fixes CVE-2014-0092 and CVE-2014-1959
* Thu Feb 13 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.21-1
- Update to 3.1.21
* Sun Jan 26 2014 Michael Cronenworth <mike at cchtml.com> - 3.1.18-1
- Update to 3.1.18
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update mingw-gnutls' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list