CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2022/01/19 05:27:50
Modified files:
security/gnutls: Tag: OPENBSD_7_0 Makefile
Added files:
security/gnutls/patches: Tag: OPENBSD_7_0
patch-lib_x509_verify-high_c
Log message:
SECURITY fix for: GNUTLS-SA-2022-01-17
x509: fix thread-safety in gnutls_x509_trust_list_verify_crt2
This function previously used gnutls_x509_trust_list_get_issuer
without GNUTLS_TL_GET_COPY flag, which is required when the function
is called from multi-threaded application and PKCS #11 trust store is
in use.
See https://gitlab.com/gnutls/gnutls/-/issues/1277 for details.
