From zfridric at redhat.com  Wed Jul  3 13:52:25 2024
From: zfridric at redhat.com (Zoltan Fridrich)
Date: Wed, 3 Jul 2024 13:52:25 +0200
Subject: [gnutls-help] gnutls 3.8.6
Message-ID: <fddb36d4-3a35-4f84-9a95-4187bdf13f62@redhat.com>

Hello,

We have just released gnutls-3.8.6. This is a bug fix and enhancement 
release on the 3.8.x branch.

We would like to thank everyone who contributed in this release:
Kai Pastor, William Roberts, Stanislav ?idek, Alexander Sosedkin, Daiki 
Ueno and Zoltan Fridrich

The detailed list of changes follows:

* Version 3.8.6 (released 2024-07-03)

** libgnutls: PBMAC1 is now supported as a MAC mechanism
 ?? for PKCS#12 To be compliant with FIPS 140-3,
 ?? PKCS#12 files with MAC based on PBKDF2 (PBMAC1)
 ?? is now supported, according to the specification
 ?? proposed in draft-ietf-lamps-pkcs12-pbmac1.

** libgnutls: SHA3 extendable output functions (XOF)
 ?? are now supported SHA3 XOF, SHAKE128 and SHAKE256,
 ?? are now usable through a new public API gnutls_hash_squeeze.

** API and ABI modifications:
gnutls_pkcs12_generate_mac3: New function
gnutls_pkcs12_flags_t: New enum
gnutls_hash_squeeze: New function


Getting the Software
================

GnuTLS may be downloaded directly from
https://www.gnupg.org/ftp/gcrypt/
A list of GnuTLS mirrors can be found at
http://www.gnutls.org/download.html

Here are the XZ compressed sources:
https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.6.tar.xz

Here are OpenPGP detached signatures signed using key:
5D46CB0F763405A7053556F47A75A648B3F9220C
https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.6.tar.xz.sig

Note that it has been signed with my openpgp key:
pub?? ed25519 2021-12-23 [SC] [expires: 2027-01-01]
 ????? 5D46CB0F763405A7053556F47A75A648B3F9220C
uid?????????? [ultimate] Zoltan Fridrich <zfridric at redhat.com>
sub?? cv25519 2021-12-23 [E] [expires: 2027-01-01]

Regards,
Zoltan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x7A75A648B3F9220C.asc
Type: application/pgp-keys
Size: 1054 bytes
Desc: OpenPGP public key
URL: <https://lists.gnupg.org/pipermail/gnutls-help/attachments/20240703/d1c52dac/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <https://lists.gnupg.org/pipermail/gnutls-help/attachments/20240703/d1c52dac/attachment.sig>