GnuTLS update may be required to access GIMPNet

[Michael Catanzaro <mcatanzaro gnome org>]

Hi developers,

If you are unable to connect to GIMPNet this week, you probably need to 
update GnuTLS. See below. At least Polari and other telepathy clients 
will be unable to connect without updated GnuTLS. Most distros should 
have fixes on the way already. We will try to get updated GNOME 3.34 
and 3.36 runtimes out soon for flatpak users.

On Mon, Jun 1, 2020 at 9:03 am, Michael Catanzaro 
<mcatanzaro gnome org> wrote:
> Hi distributors,
>
> By now, you're likely to already have at least one bug report about 
> this, but an important root CA expired yesterday, leading to a large 
> number of certificate verification failures in applications that use 
> GnuTLS [1][2]. Almost all GNOME applications, including WebKitGTK, 
> depend on GnuTLS (via glib-networking) to perform certificate 
> verification, so the impact is quite significant.
>
> A patch for GnuTLS is available at [3], which you are encouraged to 
> urgently apply. Fedora, Debian, and freedesktop-sdk updates are 
> already in the works. In the meantime, you'll probably notice 
> significant breakage in random places; e.g. Epiphany CI is currently 
> broken due to failure to download our adblock filters, 
> freedesktop-sdk builds were broken due to failure to download 
> gnu-hello, etc.
>
> Michael
>
> [1] https://gitlab.com/gnutls/gnutls/-/issues/1008
> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1842174
> [3] https://gitlab.com/gnutls/gnutls/-/merge_requests/1271.patch