| Name: | gnutls-fips |
|---|---|
| Version: | 3.8.10 |
| Release: | 4.el10_2 |
| Architecture: | aarch64 |
| Group: | Unspecified |
| Size: | 0 |
| License: | GPL-3.0-or-later AND LGPL-2.1-or-later |
| RPM: | gnutls-fips-3.8.10-4.el10_2.aarch64.rpm |
| Source RPM: | gnutls-3.8.10-4.el10_2.src.rpm |
| Build Date: | Tue Jun 09 2026 |
| Build Host: | build-ol10-aarch64.oracle.com |
| Vendor: | Oracle America |
| URL: | http://www.gnutls.org/ |
| Summary: | Virtual package to install packages required to use gnutls under FIPS mode |
| Description: | GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package does not contain any file, but installs required packages to use GnuTLS under FIPS mode. |
- Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in
- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches
- key_update: rework the rekeying logic
- Update to 3.8.10 upstream release
- algorithms: assign hash strength to ML-DSA signature algorithms
- nettle/pk: mark ML-DSA as FIPS-unapproved
- Enable ML-DSA at TLS 1.3 level
- Preserve ARM registers, reenable ARM assembly
- Disable assembly on aarch64 as a stopgap measure
- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038