Block DES-CBC usage in decrypting PKCS#12 bag under FIPS (#2115244)
sysrng: reseed source DRBG for prediction resistance

Make gnutls-cli work with KTLS for testing
Fix double-free in gnutls_pkcs7_verify (#2109790)

Limit input size for AES-GCM according to SP800-38D (#2095251)
Do not treat GPG verification errors as fatal
Remove gnutls-3.7.6-libgnutlsxx-const.patch

Allow enabling KTLS with config file (#2042009)

Update to gnutls 3.7.6 (#2097327)

Use only the first component of VERSION from /etc/os-release (#2070249)
Don't run power-on self-tests on DSA (#2061325)

Stop using typeof keyword for tss2 function prototypes (#2057490)
Ensure allowlist API is called before priority string construction (#1975421)

Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
Ensure allowlisting API is called before priority string is constructed (#2042532)

Compile out GOST algorithm IDs (#1945292)

Fix upstream testsuite in fips mode (#2051637)

Specify FIPS140-3 module name and version
fips: allow a few more primes in RSA key generation
fips: tighten PKCS#12 algorithm checks
Correct return value of KTLS stub API

Disable config reload in order to not break allowlisting (#2042532)

Build with TPM2 support, patch from Alexander Sosedkin (#2033220)

Update to gnutls 3.7.3 (#2033220)

Update gnutls_{hash,hmac}_copy man-pages as well (#1999639)