#4979 closed enhancement (fixed)
gnutls-3.3.1
Reported by: | Fernando de Oliveira | Owned by: | Fernando de Oliveira |
---|---|---|---|
Priority: | normal | Milestone: | 7.6 |
Component: | BOOK | Version: | SVN |
Severity: | normal | Keywords: | |
Cc: |
Description ¶
ftp://ftp.gnutls.org/gcrypt/gnutls/v3.3/gnutls-3.3.1.tar.xz
http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/7443
* Version 3.3.1 (released 2014-04-19) ** libgnutls: Enforce more strict checks to heartbeat messages concerning padding and payload. Suggested by Peter Dettman. ** libgnutls: Allow decoding PKCS #8 files with ECC parameters from openssl. ** libgnutls: Several small bug fixes found by coverity. ** libgnutls: The conditionally available self-test functions were moved to self-test.h. ** libgnutls: Fixed issue with the check of incoming data when two different recv and send pointers have been specified. Reported and investigated by JMRecio. ** libgnutls: Fixed issue in the RSA-PSK key exchange, which would result to illegal memory access if a server hint was provided. Reported by André Klitzing. ** libgnutls: Fixed client memory leak in the PSK key exchange, if a server hint was provided. ** libgnutls: Corrected the *get_*_othername_oid() functions. ** API and ABI modifications: No changes since last version.
Change History (8)
comment:1 by , 11 years ago
Owner: | changed from | to
---|---|
Status: | new → assigned |
comment:2 by , 11 years ago
by , 11 years ago
Attachment: | gnutls-3.3.1-gnutls_secure_malloc-1.patch added |
---|
comment:3 by , 11 years ago
Final part was not good. Rewriting: Alternatives:
- Update the book using the patch and disabling (?) man and info.
- I am doing something wrong and it fails only in my system. But version in the book does not fail.
- We skip this update and wait either for a patch or a new version.
comment:4 by , 11 years ago
Alternative 4. there is a switch that just avoids reaching that point of the error: --disable-guile.
I am tired now, but tomorrow morning, will update using this switch.
comment:6 by , 11 years ago
Problems with guile and tests are solved upstream. I will include a patch to fix both problems after I test with LFS-7.5 (did only with LFS-7.1).
comment:7 by , 11 years ago
Build with guile is back and the test suite is working, with added patch, both in r12986.
Note:
See TracTickets
for help on using tickets.
There is a regression, causing the error:
I have built a patch that fixes that. Not sure how unsecured it becomes.
But there is a problem. The docs are all rebuilt (man and info), with two consequences: I am not sure what the dependencies are used to do that, and the build time increases to about 2.6 SBU.
There is a switch that I could add: --disable-doc. However, I believe most people would like to have at least the man pages.
I will attach the patch and wait until tomorrow for any possible help, which I would much appreciate.
Alternatives:
I am doing something wrong and it fails only in my system. But version in the book does not fail.
We skip this update and wait either for a patch or a new version.