id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
7039	gnutls-3.4.6	Fernando de Oliveira	Fernando de Oliveira	"[ftp://ftp.gnutls.org/gcrypt/gnutls/v3.4/gnutls-3.4.6.tar.xz]

[ftp://ftp.gnutls.org/gcrypt/gnutls/v3.4/gnutls-3.4.6.tar.xz.sig]

[http://www.gnutls.org/security.html]

Only refers to GnuTLS version < 3.3.14, which is not our case.

{{{
Tag
GNUTLS-SA-2015-4

...
}}}

[https://lists.gnupg.org/pipermail/gnutls-help/2015-October/003982.html]

{{{
[gnutls-help] gnutls 3.4.6
Nikos Mavrogiannopoulos nmav at gnutls.org
Tue Oct 20 18:19:30 CEST 2015

Hello,

 I've just released gnutls 3.4.6. This version fixes bugs and adds minor
 features to the next stable branch.

* Version 3.4.6 (released 2015-10-20)

** libgnutls: Added new simple verification functions. That avoids the
   need to install a callback to perform certificate verification. See
   doc/examples/ex-client-x509.c for usage.

** libgnutls: Introduced the security parameter 'future' which is at
   the 256-bit level of security, and 'ultra' was aligned to its
   documented size at 192-bits.

** libgnutls: When writing a certificate into a PKCS #11 token, ensure
   that CKA_SERIAL_NUMBER and CKA_ISSUER are written. Reported by Sumit
   Bose.

** libgnutls: Allow the presence of legacy ciphers and key exchanges in
   priority strings and consider them a no-op.

** libgnutls: Handle the extended master secret as a mandatory
   extension. That fixes incompatibility issues with Chromium (#45).
   Reported by Hubert Kario.

** libgnutls: Added the ability to copy a public key into a PKCS #11
   token.

** tools: Added support for LDAP and XMPP negotiation for STARTTLS.

** p11tool: Allow writing a public key into a PKCS #11 token.

** certtool: Key generation security level was switched to HIGH. That
   is, by default the tool generates 3072 bit keys for RSA and DSA.

** API and ABI modifications:
gnutls_session_set_verify_function: Added
gnutls_session_set_verify_cert: Added
gnutls_session_set_verify_cert2: Added
gnutls_session_get_verify_cert_status: Added
gnutls_pkcs11_copy_pubkey: Added

Getting the Software

...

regards,
Nikos
}}}"	enhancement	closed	normal	7.9	BOOK	SVN	medium	fixed