CVS commit: pkgsrc/security/gnutls

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jan 17 20:23:05 UTC 2024

Modified Files:
        pkgsrc/security/gnutls: Makefile distinfo

Log Message:
gnutls: updated to 3.8.3

Version 3.8.3 (released 2024-01-16)

** libgnutls: Fix more timing side-channel inside RSA-PSK key exchange
   [GNUTLS-SA-2024-01-14, CVSS: medium] [CVE-2024-0553]

** libgnutls: Fix assertion failure when verifying a certificate chain with a
   cycle of cross signatures
   [GNUTLS-SA-2024-01-09, CVSS: medium] [CVE-2024-0567]

** libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 token
   certtool was unable to handle Ed25519 keys generated on PKCS#11
   with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2.


To generate a diff of this commit:
cvs rdiff -u -r1.245 -r1.246 pkgsrc/security/gnutls/Makefile
cvs rdiff -u -r1.159 -r1.160 pkgsrc/security/gnutls/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/gnutls/Makefile
diff -u pkgsrc/security/gnutls/Makefile:1.245 pkgsrc/security/gnutls/Makefile:1.246
--- pkgsrc/security/gnutls/Makefile:1.245       Thu Nov 16 12:31:11 2023
+++ pkgsrc/security/gnutls/Makefile     Wed Jan 17 20:23:05 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.245 2023/11/16 12:31:11 adam Exp $
+# $NetBSD: Makefile,v 1.246 2024/01/17 20:23:05 adam Exp $
 
-DISTNAME=      gnutls-3.8.2
+DISTNAME=      gnutls-3.8.3
 CATEGORIES=    security devel
 MASTER_SITES=  https://www.gnupg.org/ftp/gcrypt/gnutls/v${PKGVERSION_NOREV:R}/
 EXTRACT_SUFX=  .tar.xz
@@ -14,20 +14,22 @@ DEPENDS+=   mozilla-rootcerts-[0-9]*:../..
 
 PLIST_SRC=     PLIST
 
-USE_LANGUAGES= c c++11
-GCC_REQD+=     6
-
-USE_LIBTOOL=                   yes
-USE_TOOLS+=                    gmake gsed perl pkg-config bash
-USE_TOOLS+=                    msgfmt msgmerge xgettext
-GNU_CONFIGURE=                 yes
+USE_CXX_FEATURES=      c++11
+USE_LANGUAGES=         c c++
+GCC_REQD+=             6
+
+USE_LIBTOOL=           yes
+USE_TOOLS+=            gmake gsed perl pkg-config bash
+USE_TOOLS+=            msgfmt msgmerge xgettext
+GNU_CONFIGURE=         yes
 # this library duplicates (and conflicts with) openssl
-CONFIGURE_ARGS+=               --disable-openssl-compatibility
-CONFIGURE_ARGS+=               --without-idn
-CONFIGURE_ARGS+=               --without-tpm
-CONFIGURE_ARGS+=               --disable-valgrind-tests
-CONFIGURE_ARGS+=               --with-default-trust-store-file=${PREFIX}/share/mozilla-rootcerts/cacert.pem
-CONFIGURE_ARGS+=               --with-libintl-prefix=${BUILDLINK_PREFIX.gettext}
+CONFIGURE_ARGS+=       --disable-openssl-compatibility
+CONFIGURE_ARGS+=       --without-idn
+CONFIGURE_ARGS+=       --without-tpm
+CONFIGURE_ARGS+=       --disable-valgrind-tests
+CONFIGURE_ARGS+=       --with-default-trust-store-file=${PREFIX}/share/mozilla-rootcerts/cacert.pem
+CONFIGURE_ARGS+=       --with-libintl-prefix=${BUILDLINK_PREFIX.gettext}
+
 # Assembler support is broken for SunOS in 3.2.9.
 CONFIGURE_ARGS.SunOS+=         --disable-hardware-acceleration
 CONFIGURE_ARGS.FreeBSD+=       ac_cv_type_max_align_t=yes

Index: pkgsrc/security/gnutls/distinfo
diff -u pkgsrc/security/gnutls/distinfo:1.159 pkgsrc/security/gnutls/distinfo:1.160
--- pkgsrc/security/gnutls/distinfo:1.159       Thu Nov 16 12:31:11 2023
+++ pkgsrc/security/gnutls/distinfo     Wed Jan 17 20:23:05 2024
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.159 2023/11/16 12:31:11 adam Exp $
+$NetBSD: distinfo,v 1.160 2024/01/17 20:23:05 adam Exp $
 
-BLAKE2s (gnutls-3.8.2.tar.xz) = dcfa9d5ff11b94b54201386d216c3e6f3a9a1fd66c3685401a89bc5b51a96db9
-SHA512 (gnutls-3.8.2.tar.xz) = b3aa6e0fa7272cfca0bb0d364fe5dc9ca70cfd41878631d57271ba0a597cf6020a55a19e97a2c02f13a253455b119d296cf6f701be2b4e6880ebeeb07c93ef38
-Size (gnutls-3.8.2.tar.xz) = 6456540 bytes
+BLAKE2s (gnutls-3.8.3.tar.xz) = bd0ccb51008095555b5a93c53cbf30e51df5a61ed4b14c81e9952b608458b1ae
+SHA512 (gnutls-3.8.3.tar.xz) = 74eddba01ce4c2ffdca781c85db3bb52c85f1db3c09813ee2b8ceea0608f92ca3912fd9266f55deb36a8ba4d01802895ca5d5d219e7d9caec45e1a8534e45a84
+Size (gnutls-3.8.3.tar.xz) = 6463720 bytes
 SHA1 (patch-configure) = 866d8a365b8338348230e47518788f494279b139