summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorZoltán Fridrich <zfridric@redhat.com>2022-09-27 12:39:17 +0000
committerZoltán Fridrich <zfridric@redhat.com>2022-09-27 12:39:17 +0000
commitf527ed0e74dce05a7f2819a982b4c3170b4a3a97 (patch)
treee9ad4292be63f165ea64b72589712d00c1da7616
parentc67d33667aedf539999637d628041a6421361400 (diff)
parentc9c67f45231421eafd57cbd9ad231334fb80b778 (diff)
downloadgnutls-f527ed0e74dce05a7f2819a982b4c3170b4a3a97.tar.gz
Merge branch '3.7.8' into 'master'3.7.8
Release 3.7.8 See merge request gnutls/gnutls!1646
-rw-r--r--NEWS14
-rw-r--r--configure.ac2
-rw-r--r--m4/hooks.m42
3 files changed, 15 insertions, 3 deletions
diff --git a/NEWS b/NEWS
index 4595555829..beaa5ebae8 100644
--- a/NEWS
+++ b/NEWS
@@ -5,7 +5,7 @@ Copyright (C) 2000-2016 Free Software Foundation, Inc.
Copyright (C) 2013-2019 Nikos Mavrogiannopoulos
See the end for copying conditions.
-* Version 3.7.8 (unreleased)
+* Version 3.7.8 (released 2022-09-27)
** libgnutls: In FIPS140 mode, RSA signature verification is an approved
operation if the key has modulus with known sizes (1024, 1280,
@@ -19,6 +19,18 @@ See the end for copying conditions.
master secret extension is negotiated). Otherwise the function now
returns error.
+** libgnutls: usage of the following functions, which are designed to
+ loosen restrictions imposed by allowlisting mode of configuration,
+ has been additionally restricted. Invoking them is now only allowed
+ if system-wide TLS priority string has not been initialized yet:
+gnutls_digest_set_secure
+gnutls_sign_set_secure
+gnutls_sign_set_secure_for_certs
+gnutls_protocol_set_enabled
+
+** API and ABI modifications:
+No changes since last version.
+
* Version 3.7.7 (released 2022-07-28)
** libgnutls: Fixed double free during verification of pkcs7 signatures.
diff --git a/configure.ac b/configure.ac
index 96894b0be3..e78bcc1698 100644
--- a/configure.ac
+++ b/configure.ac
@@ -23,7 +23,7 @@ dnl Process this file with autoconf to produce a configure script.
AC_PREREQ(2.64)
dnl when updating version also update LT_REVISION in m4/hooks.m4
-AC_INIT([GnuTLS], [3.7.7], [bugs@gnutls.org])
+AC_INIT([GnuTLS], [3.7.8], [bugs@gnutls.org])
AC_CONFIG_AUX_DIR([build-aux])
AC_CONFIG_MACRO_DIRS([m4 src/gl/m4 lib/unistring/m4])
AC_CANONICAL_HOST
diff --git a/m4/hooks.m4 b/m4/hooks.m4
index c32b3bc380..f3cdaa8586 100644
--- a/m4/hooks.m4
+++ b/m4/hooks.m4
@@ -41,7 +41,7 @@ AC_DEFUN([LIBGNUTLS_HOOKS],
#
# Interfaces removed: AGE=0 (+bump all symbol versions in .map)
AC_SUBST(LT_CURRENT, 64)
- AC_SUBST(LT_REVISION, 1)
+ AC_SUBST(LT_REVISION, 2)
AC_SUBST(LT_AGE, 34)
AC_SUBST(LT_SSL_CURRENT, 27)