Hi developers,

If you are unable to connect to GIMPNet this week, you probably need to update GnuTLS. See below. At least Polari and other telepathy clients will be unable to connect without updated GnuTLS. Most distros should have fixes on the way already. We will try to get updated GNOME 3.34 and 3.36 runtimes out soon for flatpak users.

On Mon, Jun 1, 2020 at 9:03 am, Michael Catanzaro <mcatanz...@gnome.org> wrote:
Hi distributors,

By now, you're likely to already have at least one bug report about this, but an important root CA expired yesterday, leading to a large number of certificate verification failures in applications that use GnuTLS [1][2]. Almost all GNOME applications, including WebKitGTK, depend on GnuTLS (via glib-networking) to perform certificate verification, so the impact is quite significant.

A patch for GnuTLS is available at [3], which you are encouraged to urgently apply. Fedora, Debian, and freedesktop-sdk updates are already in the works. In the meantime, you'll probably notice significant breakage in random places; e.g. Epiphany CI is currently broken due to failure to download our adblock filters, freedesktop-sdk builds were broken due to failure to download gnu-hello, etc.

Michael

[1] https://gitlab.com/gnutls/gnutls/-/issues/1008
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1842174
[3] https://gitlab.com/gnutls/gnutls/-/merge_requests/1271.patch



_______________________________________________
desktop-devel-list mailing list
desktop-devel-list@gnome.org
https://mail.gnome.org/mailman/listinfo/desktop-devel-list

Reply via email to