Update GnuTLS from 3.8.9 to 3.8.13 #3463
Merged
+6
−6
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
GnuTLS 3.8.11 raised its minimum Nettle version to 3.10. Nettle 3.10.x keeps the sonames of 3.7 (libnettle.so.8, libhogweed.so.6), so existing binaries keep working. Nettle 4.0 changes the API and ABI, and is therefore not used. The tarball’s signature by Niels Möller (343C 2FF0 FBEE 5EC2 EDBE F399 F359 9FF8 28C6 7298) from the GNU keyring is good. The beehive URL is derived from the tarball’s MD5 sum; the file still has to be mirrored. Also drop the stray quote from the commented upstream URL. https://git.lysator.liu.se/nettle/nettle/-/blob/nettle_3.10.2_release_20250626/NEWS Assisted-by: Claude Opus 5.5 <noreply@anthropic.com>
Fixes many security issues, among them CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, CVE-2025-6395, CVE-2025-9820, CVE-2025-14831, CVE-2026-1584 and the thirteen GNUTLS-SA-2026-04-29 advisories (e.g. CVE-2026-33845, CVE-2026-33846, CVE-2026-42009, CVE-2026-42010, CVE-2026-3833). 3.8.11 requires Nettle 3.10 or later, updated in the previous commit, and derives the default priority file from `--sysconfdir` instead of hard-coding `/etc/gnutls/config`. The tarball’s signatures by Zoltan Fridrich and Alexander Sosedkin from the GnuTLS release keyring are good. https://gitlab.com/gnutls/gnutls/-/tree/3.8.13 Assisted-by: Claude Opus 5.5 <noreply@anthropic.com>
Paul Menzel (pmenzel)
force-pushed
the
update-gnutls-from-3.8.9-to-3.8.13
branch
from
2363214 to
c163c1a
Compare
Sign in
to join this conversation on GitHub.
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Update libnettle from 3.7.2 to 3.10.2 and GnuTLS from 3.8.9 to 3.8.13.
nettle 3.7.2 → 3.10.2: the library names stay the same: libnettle.so.8 and libhogweed.so.6.