diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-05-29 19:43:32 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-05-30 07:13:10 +0200 |
| commit | bd93a14d329f0bdd291f1461d11db0c1dc33f369 (patch) | |
| tree | 4a2dcf5086a4303017ce98dd5d538acf8eaef8da | |
| parent | 18bd2780f5bede9db4a337b9948b680c3a47e725 (diff) | |
| download | gnutls-bd93a14d329f0bdd291f1461d11db0c1dc33f369.tar.gz | |
doc updategnutls_3_3_3
| -rw-r--r-- | NEWS | 12 |
1 files changed, 5 insertions, 7 deletions
@@ -3,23 +3,21 @@ Copyright (C) 2000-2014 Free Software Foundation, Inc. Copyright (C) 2013, 2014 Nikos Mavrogiannopoulos See the end for copying conditions. -* Version 3.3.3 (unreleased) +* Version 3.3.3 (released 2014-05-30) -** libgnutls: Eliminated null pointer dereferences in ASN.1 parser. -Issues discovered using the Codenomicon TLS test suite. - -** libgnutls: Eliminated null pointer dereference in ciphersuite parsing. +** libgnutls: Eliminated memory corruption issue in Server Hello parsing. Issue reported by Joonas Kuorilehto of Codenomicon. ** libgnutls: gnutls_global_set_mutex() was modified to operate with the new initialization process. -** libgnutls: increased the maximum certificate size buffer +** libgnutls: Increased the maximum certificate size buffer in the PKCS #11 subsystem. ** libgnutls: Check the return code of getpwuid_r() instead of relying on the result value. That avoids issue in certain systems, when using -tofu authentication and the home path cannot be determined. +tofu authentication and the home path cannot be determined. Issue reported +by Viktor Dukhovni. ** libgnutls-dane: Improved dane_verify_session_crt(), which now attempts to create a full chain. This addresses points from https://savannah.gnu.org/support/index.php?108552 |