From 10214f4435314b07832c6b9d95f67cb1b4f72008 Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Nov 04 2013 16:03:46 +0000 Subject: new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa() --- diff --git a/.gitignore b/.gitignore index 109acdc..5710594 100644 --- a/.gitignore +++ b/.gitignore @@ -27,3 +27,4 @@ gnutls-2.10.1-nosrp.tar.bz2 /gnutls-3.1.13-hobbled.tar.xz /gnutls-3.1.13-hobbled-el.tar.xz /gnutls-3.1.15-hobbled.tar.xz +/gnutls-3.1.16-hobbled.tar.xz diff --git a/gnutls.spec b/gnutls.spec index d4d61d3..78bfb46 100644 --- a/gnutls.spec +++ b/gnutls.spec @@ -2,7 +2,7 @@ %bcond_with guile Summary: A TLS protocol implementation Name: gnutls -Version: 3.1.15 +Version: 3.1.16 Release: 1%{?dist} # The libraries are LGPLv2.1+, utilities are GPLv3+, however # the bundled gnulib is LGPLv3+ @@ -257,6 +257,10 @@ fi %endif %changelog +* Mon Nov 4 2013 Tomáš Mráz 3.1.16-1 +- new upstream release +- fixes CVE-2013-4466 off-by-one in dane_query_tlsa() + * Fri Oct 25 2013 Tomáš Mráz 3.1.15-1 - new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entries diff --git a/sources b/sources index 0a2aabc..e27e7c8 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -bdbdbbf42f97bc8fd72d83ab44a62fbd gnutls-3.1.15-hobbled.tar.xz +6cb95ec4498c302197239e4dfd17b8d4 gnutls-3.1.16-hobbled.tar.xz