Re: GnuTLS update may be required to access GIMPNet

[Nirbheek Chauhan <nirbheek chauhan gmail com>]

Thanks for posting about this!

On Tue, Jun 2, 2020 at 8:42 PM Michael Catanzaro <mcatanzaro gnome org> wrote:

Hi developers,

If you are unable to connect to GIMPNet this week, you probably need to
update GnuTLS. See below. At least Polari and other telepathy clients
will be unable to connect without updated GnuTLS. Most distros should
have fixes on the way already. We will try to get updated GNOME 3.34
and 3.36 runtimes out soon for flatpak users.

On Mon, Jun 1, 2020 at 9:03 am, Michael Catanzaro
<mcatanzaro gnome org> wrote:
> Hi distributors,
>
> By now, you're likely to already have at least one bug report about
> this, but an important root CA expired yesterday, leading to a large
> number of certificate verification failures in applications that use
> GnuTLS [1][2]. Almost all GNOME applications, including WebKitGTK,
> depend on GnuTLS (via glib-networking) to perform certificate
> verification, so the impact is quite significant.
>
> A patch for GnuTLS is available at [3], which you are encouraged to
> urgently apply. Fedora, Debian, and freedesktop-sdk updates are
> already in the works. In the meantime, you'll probably notice
> significant breakage in random places; e.g. Epiphany CI is currently
> broken due to failure to download our adblock filters,
> freedesktop-sdk builds were broken due to failure to download
> gnu-hello, etc.
>
> Michael
>
> [1] https://gitlab.com/gnutls/gnutls/-/issues/1008
> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1842174
> [3] https://gitlab.com/gnutls/gnutls/-/merge_requests/1271.patch
>


_______________________________________________
desktop-devel-list mailing list
desktop-devel-list gnome org
https://mail.gnome.org/mailman/listinfo/desktop-devel-list