[gnutls-devel] GnuTLS | Release 3.8.4 (!1823)

Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Mon Mar 18 17:59:15 CET 2024




Daiki Ueno started a new discussion on NEWS: https://gitlab.com/gnutls/gnutls/-/merge_requests/1823#note_1819612323

>     to import restricted private keys if they are stored in PKCS#8
>     format.
>  
> +** libgnutls: Fix side-channel in the constant-time RSA-PSK.
> +   Reported by George Pantelakis, Alexander Sosedkin (#1526).
> +   [GNUTLS-SA-2023-12-04, CVSS: medium] [CVE-2024-28834]
> +
> +** libgnutls: Fixed a bug where certtool crashed when verifying a certificate
> +   chain with more than 16 certificates. Reported by yixiangzhike (#1527)

Might also make sense to credit #1525.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1823#note_1819612323
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20240318/b45df5d7/attachment.html>


More information about the Gnutls-devel mailing list