From 1a14748b2d2c1ca417134bd48a1021554c4742ef Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Sat, 3 Oct 2026 12:58:18 +0200 Subject: [PATCH 1/2] nettle: Update version from 3.7.2 to 3.10.2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit GnuTLS 3.8.11 raised its minimum Nettle version to 3.10. Nettle 3.10.x keeps the sonames of 3.7 (libnettle.so.8, libhogweed.so.6), so existing binaries keep working. Nettle 4.0 changes the API and ABI, and is therefore not used. The tarball’s signature by Niels Möller (343C 2FF0 FBEE 5EC2 EDBE F399 F359 9FF8 28C6 7298) from the GNU keyring is good. The beehive URL is derived from the tarball’s MD5 sum; the file still has to be mirrored. Also drop the stray quote from the commented upstream URL. https://git.lysator.liu.se/nettle/nettle/-/blob/nettle_3.10.2_release_20250626/NEWS Assisted-by: Claude Opus 5.5 --- nettle.be0 | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/nettle.be0 b/nettle.be0 index eba00eab0..34aa7b779 100755 --- a/nettle.be0 +++ b/nettle.be0 @@ -1,10 +1,10 @@ #!/usr/bin/env beesh -# BEE_VERSION nettle-3.7.2-0 +# BEE_VERSION nettle-3.10.2-0 -# https://ftp.gnu.org/gnu/nettle/nettle-3.7.2.tar.gz" +# https://ftp.gnu.org/gnu/nettle/nettle-3.10.2.tar.gz -SRCURL[0]="https://beehive.molgen.mpg.de/22849db27ed563ebbc829273f0c97e35/nettle-3.7.2.tar.gz" +SRCURL[0]="https://beehive.molgen.mpg.de/b28bcbf6f045ff007940a9401673600d/nettle-3.10.2.tar.gz" # PATCHURL+=() From c163c1a65b81b7ffea15861c0d9a232d667e2a1b Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Sat, 3 Oct 2026 12:58:19 +0200 Subject: [PATCH 2/2] gnutls: Update version from 3.8.9 to 3.8.13 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fixes many security issues, among them CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, CVE-2025-6395, CVE-2025-9820, CVE-2025-14831, CVE-2026-1584 and the thirteen GNUTLS-SA-2026-04-29 advisories (e.g. CVE-2026-33845, CVE-2026-33846, CVE-2026-42009, CVE-2026-42010, CVE-2026-3833). 3.8.11 requires Nettle 3.10 or later, updated in the previous commit, and derives the default priority file from `--sysconfdir` instead of hard-coding `/etc/gnutls/config`. The tarball’s signatures by Zoltan Fridrich and Alexander Sosedkin from the GnuTLS release keyring are good. https://gitlab.com/gnutls/gnutls/-/tree/3.8.13 Assisted-by: Claude Opus 5.5 --- gnutls.be0 | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnutls.be0 b/gnutls.be0 index e02d81ed3..af2f6e1a8 100755 --- a/gnutls.be0 +++ b/gnutls.be0 @@ -1,11 +1,11 @@ #!/usr/bin/env beesh -# BEE_VERSION gnutls-3.8.9-0 +# BEE_VERSION gnutls-3.8.13-0 # more info: https://gnutls.org/ -#SRCURL[0]="https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.9.tar.xz" -SRCURL[0]="https://beehive.molgen.mpg.de/33f4c800c20af2983c45223a803da865/gnutls-3.8.9.tar.xz" +#SRCURL[0]="https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.13.tar.xz" +SRCURL[0]="https://beehive.molgen.mpg.de/a97671c1839340c6b43c23ccb3237180/gnutls-3.8.13.tar.xz" # PATCHURL+=()