-
Thu Apr 30 2026 Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-4
- Fix 3.8.13 CVEs and security issues, update Makefile.in
- Fix CVE-2026-33846
- Fix CVE-2026-42009
- Fix CVE-2026-33845
- Fix CVE-2026-42010
- Fix CVE-2026-3833
- Fix CVE-2026-42011
- Fix CVE-2026-42012
- Fix CVE-2026-42013
- Fix CVE-2026-42014
- Fix CVE-2026-5260
- Fix CVE-2026-42015
- Fix CVE-2026-3832
- Fix CVE-2026-5419
- Fix upstream security issue #1808
- Fix upstream security issue #1810
- Fix upstream security issue #1813
- Fix upstream security issue #1818
- Fix upstream security issue #1818
- Fix upstream security issue #1819
- Fix upstream security issue #1822
- Fix upstream security issue #1841
- Fix upstream security issue #1823
- Fix upstream security issue #1817
- Fix upstream security issue #1820
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in
-
Tue Feb 10 2026 Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches
-
Fri Aug 01 2025 Daiki Ueno <dueno@redhat.com> - 3.8.10-2
- key_update: rework the rekeying logic
-
Thu Jul 10 2025 Daiki Ueno <dueno@redhat.com> - 3.8.10-1
- Update to 3.8.10 upstream release
-
Fri Jul 04 2025 Daiki Ueno <dueno@redhat.com> - 3.8.9-19
- algorithms: assign hash strength to ML-DSA signature algorithms
-
Wed Jun 25 2025 Daiki Ueno <dueno@redhat.com> - 3.8.9-18
- nettle/pk: mark ML-DSA as FIPS-unapproved
-
Thu Jun 19 2025 Daiki Ueno <dueno@redhat.com> - 3.8.9-17
- Enable ML-DSA at TLS 1.3 level
-
Thu May 08 2025 Alexander Sosedkin <asosedkin@redhat.com> - 3.8.9-16
- Preserve ARM registers, reenable ARM assembly
-
Wed May 07 2025 Alexander Sosedkin <asosedkin@redhat.com> - 3.8.9-15
- Disable assembly on aarch64 as a stopgap measure
-
Thu Apr 24 2025 Daiki Ueno <dueno@redhat.com> - 3.8.9-14
- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038