Ubuntu
gnutls28 package

gnutls28 3.8.1-4ubuntu6 source package in Ubuntu

Changelog

gnutls28 (3.8.1-4ubuntu6) noble; urgency=medium

  * SECURITY UPDATE: timing side-channel inside RSA-PSK key exchange
    - debian/patches/CVE-2023-5981.patch: side-step potential side-channel
      in lib/auth/rsa.c, lib/auth/rsa_psk.c, lib/gnutls_int.h,
      lib/priority.c.
    - CVE-2023-5981

 -- Marc Deslauriers <email address hidden>  Thu, 23 Nov 2023 14:04:17 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Noble
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
gnutls28_3.8.1.orig.tar.xz 6.1 MiB ba8b9e15ae20aba88f44661978f5b5863494316fe7e722ede9d069fe6294829c
gnutls28_3.8.1.orig.tar.xz.asc 996 bytes 3b6357c19431736099929e13ff8340e9ed4b36e4e22b34ae7b46e1f85a1d2884
gnutls28_3.8.1-4ubuntu6.debian.tar.xz 72.0 KiB 01b62a9f3ef745f5c69d5452d245fd39caa5bdc7c4e1a73d15998e5459cb505a
gnutls28_3.8.1-4ubuntu6.dsc 3.3 KiB 21f37f707e098db15b5a6e264a5953460164acb759138497061e1f650d645600

View changes file

Binary packages built by this source

gnutls-bin: GNU TLS library - commandline utilities

 GnuTLS is a portable library which implements the Transport Layer
 Security (TLS 1.0, 1.1, 1.2, 1.3) and Datagram
 Transport Layer Security (DTLS 1.0, 1.2) protocols.
 .
 GnuTLS features support for:
  - certificate path validation, as well as DANE and trust on first use.
  - the Online Certificate Status Protocol (OCSP).
  - public key methods, including RSA and Elliptic curves, as well as password
    and key authentication methods such as SRP and PSK protocols.
  - all the strong encryption algorithms, including AES and Camellia.
  - CPU-assisted cryptography with VIA padlock and AES-NI instruction sets.
  - HSMs and cryptographic tokens, via PKCS #11.
 .
 This package contains a commandline interface to the GNU TLS library, which
 can be used to set up secure connections from e.g. shell scripts, debugging
 connection issues or managing certificates.
 .
 Useful utilities include:
  - TLS termination: gnutls-cli, gnutls-serv
  - key and certificate management: certtool, ocsptool, p11tool
  - credential management: srptool, psktool

gnutls-bin-dbgsym: debug symbols for gnutls-bin
gnutls-doc: GNU TLS library - documentation and examples

 GnuTLS is a portable library which implements the Transport Layer
 Security (TLS 1.0, 1.1, 1.2, 1.3) and Datagram
 Transport Layer Security (DTLS 1.0, 1.2) protocols.
 .
 GnuTLS features support for:
  - certificate path validation, as well as DANE and trust on first use.
  - the Online Certificate Status Protocol (OCSP).
  - public key methods, including RSA and Elliptic curves, as well as password
    and key authentication methods such as SRP and PSK protocols.
  - all the strong encryption algorithms, including AES and Camellia.
  - CPU-assisted cryptography with VIA padlock and AES-NI instruction sets.
  - HSMs and cryptographic tokens, via PKCS #11.
 .
 This package contains all the GnuTLS documentation.

libgnutls-dane0: No summary available for libgnutls-dane0 in ubuntu noble.

No description available for libgnutls-dane0 in ubuntu noble.

libgnutls-dane0-dbgsym: No summary available for libgnutls-dane0-dbgsym in ubuntu noble.

No description available for libgnutls-dane0-dbgsym in ubuntu noble.

libgnutls-openssl27: No summary available for libgnutls-openssl27 in ubuntu noble.

No description available for libgnutls-openssl27 in ubuntu noble.

libgnutls-openssl27-dbgsym: No summary available for libgnutls-openssl27-dbgsym in ubuntu noble.

No description available for libgnutls-openssl27-dbgsym in ubuntu noble.

libgnutls28-dev: GNU TLS library - development files

 GnuTLS is a portable library which implements the Transport Layer
 Security (TLS 1.0, 1.1, 1.2, 1.3) and Datagram
 Transport Layer Security (DTLS 1.0, 1.2) protocols.
 .
 GnuTLS features support for:
  - certificate path validation, as well as DANE and trust on first use.
  - the Online Certificate Status Protocol (OCSP).
  - public key methods, including RSA and Elliptic curves, as well as password
    and key authentication methods such as SRP and PSK protocols.
  - all the strong encryption algorithms, including AES and Camellia.
  - CPU-assisted cryptography with VIA padlock and AES-NI instruction sets.
  - HSMs and cryptographic tokens, via PKCS #11.
 .
 This package contains the GnuTLS development files.

libgnutls30: No summary available for libgnutls30 in ubuntu noble.

No description available for libgnutls30 in ubuntu noble.

libgnutls30-dbgsym: No summary available for libgnutls30-dbgsym in ubuntu noble.

No description available for libgnutls30-dbgsym in ubuntu noble.