GNU bug report logs - #48648
[PATCH] gnu: gnutls: Update to 3.6.16 [fixes CVE-2021-20305].

Previous Next

Full log

Message #20 received at 48648 <at> debbugs.gnu.org (full text, mbox):

From: Solene Rapenne <solene <at> perso.pw>
To: Leo Famulari <leo <at> famulari.name>
Cc: 48648 <at> debbugs.gnu.org, Marius Bakke <marius <at> gnu.org>
Subject: Re: [bug#48648] [PATCH] gnu: gnutls: Update to 3.6.16 [fixes
 CVE-2021-20305].
Date: Tue, 25 May 2021 22:47:57 +0200

Le Tue, 25 May 2021 16:00:53 -0400,
Leo Famulari <leo <at> famulari.name> a écrit :

> On Tue, May 25, 2021 at 09:46:10PM +0200, Marius Bakke wrote:
> > GnuTLS usually mention whether or not an update is ABI-compatible:
> > 
> >   https://lists.gnupg.org/pipermail/gnutls-help/2021-May/004707.html  
> 
> Ah, that's great. They say it's compatible.
> 
> > However it's good practice to verify that with something like 'abidiff'
> > (from the 'libabigail' package).  I.e.:
> > 
> >   abidiff $(guix build gnutls)/lib/libgnutls.so \
> >           $(./pre-inst-env guix build gnutls)/lib/libgnutls.so
> > 
> > (this won't work because of multiple outputs, but you get the drill)  
> 
> Solene, can you try it and let us know the result?

abidiff is an interesting program, very useful.

$ abidiff \
/gnu/store/5yvzilh78996627i8avq532sl2c03i95-gnutls-3.6.15/lib/libgnutls.so \
/gnu/store/akc7l65z459pnifrr6bcm97cjvmpvp9k-gnutls-3.6.16/lib/libgnutls.so

$ echo $?
0

I understand from the output that there is no ABI change.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.