<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-text-html" lang="x-unicode">
<pre><font face="monospace">Hello,</font>
We have just released gnutls-3.7.6. This is a bug fix release on the 3.7.x branch.
We would like to thank everyone who contributed in this release: Zoltan Fridrich, Daiki Ueno, Tobias Heider and Asad Mehmood
The detailed list of changes follows:
** libgnutls: Fixed invalid write when gnutls_realloc_zero() is called with new_size < old_size. This bug caused heap corruption when gnutls_realloc_zero() has been set as gmp reallocfunc (!1592, #1367, #1368, #1369).
** API and ABI modifications:
No changes since last version.
Getting the Software
====================
GnuTLS may be downloaded directly from
<a href="https://www.gnupg.org/ftp/gcrypt/" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://www.gnupg.org/ftp/gcrypt/&source=gmail&ust=1652432968350000&usg=AOvVaw3njjTg_V6cIskMjpkmAg7X">https://www.gnupg.org/ftp/<wbr>gcrypt/</a>
A list of GnuTLS mirrors can be found at
<a href="http://www.gnutls.org/download.html" target="_blank" data-saferedirecturl="https://www.google.com/url?q=http://www.gnutls.org/download.html&source=gmail&ust=1652432968350000&usg=AOvVaw1J-wc5GojHL2n94ox7b_09" moz-do-not-send="true">http://www.gnutls.org/<wbr>download.html</a>
Here are the XZ compressed sources:
<a href="https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.6.tar.xz" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz&source=gmail&ust=1652432968350000&usg=AOvVaw3ybeveKudYmPlqI6U8OXIO" moz-do-not-send="true">https://www.gnupg.org/ftp/<wbr>gcrypt/gnutls/v3.7/gnutls-3.7.<wbr>6.tar.xz</a>
Here are OpenPGP detached signatures signed using keys:
5D46CB0F763405A7053556F47A75A6<wbr>48B3F9220C
and
462225C3B46F34879FC8496CD60584<wbr>8ED7E69871
<a href="https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.6.tar.xz.sig" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.4.tar.xz.sig&source=gmail&ust=1652432968350000&usg=AOvVaw1J49sWnCfoI9B3ou7WbdQ6" moz-do-not-send="true">https://www.gnupg.org/ftp/<wbr>gcrypt/gnutls/v3.7/gnutls-3.7.<wbr>6.tar.xz.sig</a>
Note that it has been signed with my openpgp key:
pub ed25519 2021-12-23 [SC] [expires: 2023-12-23]
5D46CB0F763405A7053556F47A75A6<wbr>48B3F9220C
uid [ultimate] Zoltan Fridrich <<a href="mailto:zfridric@redhat.com" target="_blank" class="moz-txt-link-freetext">zfridric@redhat.com</a>>
sub cv25519 2021-12-23 [E] [expires: 2023-12-23]
and Daiki Uenos openpgp key:
pub rsa4096 2009-07-23 [SC] [expires: 2023-09-25]
462225C3B46F34879FC8496CD60584<wbr>8ED7E69871
uid [ultimate] Daiki Ueno <<a href="http://lists.gnupg.org/mailman/listinfo/gnutls-help" target="_blank" data-saferedirecturl="https://www.google.com/url?q=http://lists.gnupg.org/mailman/listinfo/gnutls-help&source=gmail&ust=1652432968350000&usg=AOvVaw18rxrVXHJCQuhzQT8ikMTN">ueno at unixuser.org</a>>
uid [ultimate] Daiki Ueno <<a href="http://lists.gnupg.org/mailman/listinfo/gnutls-help" target="_blank" data-saferedirecturl="https://www.google.com/url?q=http://lists.gnupg.org/mailman/listinfo/gnutls-help&source=gmail&ust=1652432968350000&usg=AOvVaw18rxrVXHJCQuhzQT8ikMTN">ueno at gnu.org</a>>
sub rsa4096 2010-02-04 [E]
Regards,
Zoltan
</pre>
</div>
</body>
</html>