Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ghc-tls for openSUSE:Factory checked in at 2026-11-06 19:51:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ghc-tls (Old) and /work/SRC/openSUSE:Factory/.ghc-tls.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ghc-tls" Fri Nov 6 19:51:03 2026 rev:45 rq:1395608 version:2.4.6 Changes: -------- --- /work/SRC/openSUSE:Factory/ghc-tls/ghc-tls.changes 2026-06-22 17:44:35.997640491 +0200 +++ /work/SRC/openSUSE:Factory/.ghc-tls.new.3759290/ghc-tls.changes 2026-11-06 19:58:18.301006004 +0100 @@ -1,0 +2,66 @@ +Fri Sep 25 13:00:37 UTC 2026 - Peter Simons <[email protected]> + +- Update tls to version 2.4.6. + ## Version 2.4.6 + + * Accept crypton 2.1, which made `ChaChaPoly1305.initialize` total by + taking a checked key rather than any `ByteArrayAccess`. The ChaCha20 + bulk cipher now goes through `aeadChacha20poly1305Init` and the AEAD + interface, as the AES ciphers beside it already did. That function has + one type across every crypton this package accepts, so the bound stays + `>=1.1.2 && <2.2` and nobody is forced to move. The two are the same + computation: crypton's AEAD model for this cipher is `finalizeAAD . + appendAAD`, then encrypt or decrypt, then the whole sixteen-byte + Poly1305 tag whatever length is asked of it. + + ## Version 2.4.5 + + * Fix the TLS 1.3 0-RTT session tests racing the NewSessionTicket. + [#547](https://github.com/haskell-tls/hs-tls/pull/547) + * CI: drop macOS with GHC 9.12, whose compiler install dominated the + wall clock. + [#546](https://github.com/haskell-tls/hs-tls/pull/546) + * CI: retry Hackage downloads, keep the cache when a test fails, and run + doctest on one job. + [#545](https://github.com/haskell-tls/hs-tls/pull/545) + * `extensionDecode` returns `Nothing`, instead of calling `error`, for a + message type in which the extension is not defined. + [#544](https://github.com/haskell-tls/hs-tls/pull/544) + * `getTLSUnique` and `getTLSExporter` return `Nothing` before a handshake, + instead of calling `error`. + [#543](https://github.com/haskell-tls/hs-tls/pull/543) + * Take two timing signals out of the CBC record path. + [#542](https://github.com/haskell-tls/hs-tls/pull/542) + * Bound the size of a handshake message reassembled from records. + [#541](https://github.com/haskell-tls/hs-tls/pull/541) + * CI: speed up. + [#540](https://github.com/haskell-tls/hs-tls/pull/540) + * Limit consecutive TLS 1.3 KeyUpdate messages. The new `limitKeyUpdate` + parameter controls this and is `Just 32` by default, so the limit is on + unless it is turned off. + [#539](https://github.com/haskell-tls/hs-tls/pull/539) + * Validate the negotiated ALPN protocol. A client now rejects an + unsolicited, empty, repeated or unoffered selection instead of ignoring + it, and a server rejects a callback result the client did not offer. + [#538](https://github.com/haskell-tls/hs-tls/pull/538) + * Validate the negotiated cipher suite against the negotiated version on + the client, and constrain `onCipherChoosing` to the candidate list on + the server. + [#537](https://github.com/haskell-tls/hs-tls/pull/537) + * Make the session ticket tests deterministic. + [#536](https://github.com/haskell-tls/hs-tls/pull/536) + + ## Version 2.4.4 + + * Enforce server certificate purpose + [#534](https://github.com/haskell-tls/hs-tls/pull/534) + * Use dedicated doctest REPL + [#533](https://github.com/haskell-tls/hs-tls/pull/533) + * Bind early data to ALPN + [#532](https://github.com/haskell-tls/hs-tls/pull/532) + * Bound certificate decompression + [#531](https://github.com/haskell-tls/hs-tls/pull/531) + * Fix RecordOverflow race after TLS 1.3 client authentication + [#530](https://github.com/haskell-tls/hs-tls/pull/530) + +------------------------------------------------------------------- Old: ---- tls-2.4.3.tar.gz New: ---- tls-2.4.6.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ghc-tls.spec ++++++ --- /var/tmp/diff_new_pack.6HMMW4/_old 2026-11-06 19:58:19.530057453 +0100 +++ /var/tmp/diff_new_pack.6HMMW4/_new 2026-11-06 19:58:19.535057662 +0100 @@ -1,7 +1,7 @@ # # spec file for package ghc-tls # -# Copyright (c) 2026 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,7 +20,7 @@ %global pkgver %{pkg_name}-%{version} %bcond_with tests Name: ghc-%{pkg_name} -Version: 2.4.3 +Version: 2.4.6 Release: 0 Summary: TLS protocol native implementation License: BSD-3-Clause ++++++ tls-2.4.3.tar.gz -> tls-2.4.6.tar.gz ++++++ ++++ 2342 lines of diff (skipped)
