GnuTLS 2.5.9, fifth and final (?) release candidate for 2.6.0

[Simon Josefsson]

The GnuTLS 2.5.x branch is NOT what you want for your stable system.  It
is intended for developers and experienced users.

I'll be traveling later this week (speaking at OpenSourceDays in
Copenhagen, see <http://opensourcedays.org/2008/> and OWASP Sweden see
<http://www.owasp.org/index.php/Sweden>) so I may have trouble releasing
2.6.0 on Oct 1th, so let's wait until next Monday when I'm back.

The intention is to release a new stable branch on October 6th, unless
problems are reported.  Test this as if it were the new stable release!

Here are the compressed sources:
  http://alpha.gnu.org/gnu/gnutls/gnutls-2.5.9.tar.bz2 (4.9MB)
  ftp://alpha.gnu.org/gnu/gnutls/gnutls-2.5.9.tar.bz2

Here is the OpenPGP signature:
  http://alpha.gnu.org/gnu/gnutls/gnutls-2.5.9.tar.bz2.sig
  ftp://alpha.gnu.org/gnu/gnutls/gnutls-2.5.9.tar.bz2.sig

The Windows binary installer and PGP signature:
  http://josefsson.org/gnutls4win/gnutls-2.5.9.exe (14MB)
  http://josefsson.org/gnutls4win/gnutls-2.5.9.exe.sig

The Windows binaries (DLL, EXE, etc) without the installer:
  http://josefsson.org/gnutls4win/gnutls-2.5.9.zip (4.9MB)
  http://josefsson.org/gnutls4win/gnutls-2.5.9.zip.sig

Thanks to Enrico Tassi, we also have mingw32 *.deb's available:
  http://josefsson.org/gnutls4win/mingw32-gnutls_2.5.9-1_all.deb (4.5MB)

Improving GnuTLS is costly, but you can help!  We are looking for
organizations that find GnuTLS useful and wish to contribute back.  You
can contribute by reporting bugs, improve the software, or donate money
or equipment.

Commercial support contracts for GnuTLS are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult, a Stockholm
based privately held company, is currently funding GnuTLS maintenance.
We are always looking for interesting development projects.  See
http://josefsson.org/ for more details.

/Simon

* Version 2.5.9 (released 2008-09-29)

** libgnutls: Fix several memory leaks.
Reported by Sam Varshavchik <mrsam at courier-mta.com>.

** libgnutls: Fix buffer overrun in gnutls_x509_crt_list_import.
Report and patch by Jonathan Manktelow.

** libgnutls: crypto.h gnutls_pk_params_st changes allocation strategy.
The parameters are now allocated in the structure itself.

** doc: Texinfo HTML manual uses a stylesheet to improve readability.

** tests: Scripts now use EXEEXT properly.
Modern libtool doesn't create wrapper script, so the self tests need
to invoke certtool.exe under MinGW32+Wine.

** Uses autoconf 2.63, automake 1.10.1, libtool 2.2.6a.
Automake warnings are now also enabled.

** API and ABI modifications:
gnutls_pk_params_st: MODIFIED