[gnutls-dev] GnuTLS 1.7.14

[Simon Josefsson]

Note that the GnuTLS 1.7.x branch is NOT what you want for your stable
system.  It is intended for developers and experienced users.

There are three remaining work items before the next stable release, and
I expect them to be solved during this week.

* Fix sign callback API to be per-credential rather than per-session.

* Check copyright papers for everyone who contributed during the 1.7.x
  phase (I opportunistically installed some fixes after confirming with
  authors that they were sending copyright assignments, although I have
  not verified that the assignment were actually received).

* Update license to (L)GPLv3.

Below is the regular release announcement...

* Version 1.7.14 (released 2007-06-26)

** Don't enable Guile bindings unless we have Guile 1.8 or later.
Patch from Ludovic Courtès <ludovic.courtes at laas.fr>.

** Fix memory leak during DSA signature verification.
Patch from Ludovic Courtès <ludovic.courtes at laas.fr>.

** Fix crash in gnutls-cli when TLS handshake fails.
Reported by Marc Haber <mh+debian-bugs at zugschlus.de> and Andreas
Metzler <ametzler at downhill.at.eu.org> via Debian BTS #429183, see
<http://bugs.debian.org/429183>.

** Minor OpenPGP fixes in stream_to_datum.
Patch from Timo Schulz <twoaday at freakmail.de> and Ludovic Courtès
<ludovic.courtes at laas.fr>.

** Fix off-by-one in TLS 1.2 handshake.
Patch from Ludovic Courtès <ludovic.courtes at laas.fr>.

** Minor Guile binding self-test cleanup.
Patch from Ludovic Courtès <ludovic.courtes at laas.fr>.

** Update gnulib files.

** API and ABI modifications:
No changes since last version.

Here are the compressed sources (4.6MB):
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.7.14.tar.bz2
  http://josefsson.org/gnutls/releases/gnutls-1.7.14.tar.bz2

Here are GPG detached signatures signed using key 0xB565716F:
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.7.14.tar.bz2.sig
  http://josefsson.org/gnutls/releases/gnutls-1.7.14.tar.bz2.sig

Here are the SHA-1 and SHA-224 checksums:

0ff2c43fead466681576c2c1cae3bac01bb648f4  gnutls-1.7.14.tar.bz2
1ab2cf7676a619375f39936d2e7fa9a749695495  gnutls-1.7.14.tar.bz2.sig

2bec7018157727542f897d3bc0c2ad73f628dcf534f13fcdf9729480  gnutls-1.7.14.tar.bz2
9b35fc78dad71ebc1db67ab940176f46164f22e90d7c9f351730b447  gnutls-1.7.14.tar.bz2.sig

Improving GnuTLS is costly, but you can help!  We are looking for
organizations that find GnuTLS useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, or donate
money or equipment.

Commercial support contracts for GnuTLS are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult, a
Stockholm based privately held company, is currently funding GnuTLS
maintenance.  We are always looking for interesting development
projects.  See http://josefsson.org/ for more details.

/Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 419 bytes
Desc: not available
URL: </pipermail/attachments/20070626/d4465610/attachment.pgp>