Bug 10857

Summary:	gnutls update to 3.1.13 for Mageia 3 to fix license issue
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	davidwhodgins, sysadmin-bugs, tmb
Version:	3	Keywords:	validated_update
Target Milestone:	---
Hardware:	i586
OS:	Linux
Whiteboard:	MGA3-64-OK MGA3-32-OK
Source RPM:	gnutls-3.1.8-2.mga3.src.rpm	CVE:
Status comment:
Bug Depends on:
Bug Blocks:	10858

Description David Walser 2013-07-27 17:16:31 CEST

At some point during gnutls 3.1.x development the license was changed to LGPLv3, which causes a licensing issue with probably lots of things that link against it (GPLv2 programs).  The license was changed back to LGPLv2.1 in 3.1.10 to fix this problem.  We had actually patched wireshark to illegally link against it (whoops!).  Updating gnutls will make this OK again.  Obviously, 3.1.13 also fixes several other bugs vs. version 3.1.8.

Advisory:
----------------------------------------

This update provides which fixes a license conflict issue for other software
that may be linked against it, including Wireshark, as well as several other
bugs.

References:
http://gnutls.org/news.html
http://lists.gnutls.org/pipermail/gnutls-devel/2013-February/006177.html
http://lists.gnutls.org/pipermail/gnutls-devel/2013-March/006201.html
http://lists.gnutls.org/pipermail/gnutls-devel/2013-May/006227.html
http://lists.gnutls.org/pipermail/gnutls-devel/2013-June/006276.html
http://lists.gnutls.org/pipermail/gnutls-devel/2013-July/006327.html
----------------------------------------

Updated packages in core/updates_testing:
----------------------------------------
gnutls-3.1.13-1.mga3
libgnutls28-3.1.13-1.mga3
libgnutls-ssl27-3.1.13-1.mga3
libgnutls-xssl0-3.1.13-1.mga3
libgnutls-devel-3.1.13-1.mga3

from gnutls-3.1.13-1.mga3.src.rpm

Reproducible: 

Steps to Reproduce:

David Walser 2013-07-27 17:29:53 CEST

Blocks: (none) => 10858

Comment 1 Dave Hodgins 2013-07-29 03:17:29 CEST

Testing complete on Mageia 3 i586 and x86_64, as part of testing
for wireshark, in bug 10858.

Could someone from the sysadmin team push 10857.adv to updates.

Keywords: (none) => validated_update
Whiteboard: (none) => MGA3-64-OK MGA3-32-OK
CC: (none) => davidwhodgins, sysadmin-bugs

Comment 2 Thomas Backlund 2013-07-29 15:56:31 CEST

Update pushed:
http://advisories.mageia.org/MGAA-2013-0074.html

Status: NEW => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED