up to 3.8.4 (fixes CVE-2024-28834 CVE-2024-28835)

- compression libraries loaded dynamically now

diff --git a/gnutls-pl.po-update.patch b/gnutls-pl.po-update.patch
index 6a31b5ed08e5e4cbfd875b74d9886198805c4fdc..a9c35f948f51b181a1b389ed640f8628c1d12129 100644 (file)
--- a/gnutls-pl.po-update.patch
+++ b/gnutls-pl.po-update.patch
@@ -13,7 +13,7 @@
 -"Project-Id-Version: gnutls-3.6.8\n"
 +"Project-Id-Version: gnutls-3.7.6\n"
  "Report-Msgid-Bugs-To: bug-gnutls@gnu.org\n"
- "POT-Creation-Date: 2024-01-16 18:19+0900\n"
+ "POT-Creation-Date: 2024-03-19 13:32+0100\n"
 -"PO-Revision-Date: 2019-06-01 08:22+0200\n"
 +"PO-Revision-Date: 2022-06-03 22:30+0200\n"
  "Last-Translator: Jakub Bogusz <qboosh@pld-linux.org>\n"

diff --git a/gnutls.spec b/gnutls.spec
index 69ac1d8fdaf27c6b81a3e1388f222a2c9bf90376..b66a7efbd71973291a30b1406824a707347461a9 100644 (file)
--- a/gnutls.spec
+++ b/gnutls.spec
@@ -14,12 +14,12 @@
 Summary:       The GNU Transport Layer Security Library
 Summary(pl.UTF-8):     Biblioteka GNU TLS (Transport Layer Security)
 Name:          gnutls
-Version:       3.8.3
+Version:       3.8.4
 Release:       1
 License:       LGPL v2.1+ (libgnutls), LGPL v3+ (libdane), GPL v3+ (openssl library and tools)
 Group:         Libraries
 Source0:       ftp://ftp.gnutls.org/gcrypt/gnutls/v3.8/%{name}-%{version}.tar.xz
-# Source0-md5: 269966167fa5bf8bae5f7534bcc3c454
+# Source0-md5: f6ba9454115a82deb352c4336648490f
 Patch0:                %{name}-info.patch
 Patch1:                %{name}-link.patch
 Patch2:                %{name}-pl.po-update.patch
@@ -85,11 +85,14 @@ Requires:   libtasn1 >= 4.11
 Requires:      nettle >= 3.6
 #Requires:     opencdk >= 0.6.6
 Requires:      p11-kit >= 0.23.1
-Requires:      zstd >= 1.3.0
 # dlopened libtss2-*
 %{?with_tpm2:Suggests: tpm2-tss}
 # dlopened libtspi
 %{?with_tpm:Suggests:  trousers-libs >= 0.3.11}
+# dlopened libz.so.1
+Suggests:      zlib
+# dlopened libzstd.so.1
+Suggests:      zstd >= 1.3.0
 Conflicts:     gnutls < 3.2.0
 
 %description libs