update gnutls to 3.7.7 (#3512)

SPECS/gnutls/gnutls.signatures.json

@@ -1,5 +1,5 @@
 {
  "Signatures": {
-  "gnutls-3.7.3.tar.xz": "fc59c43bc31ab20a6977ff083029277a31935b8355ce387b634fa433f8f6c49a"
+  "gnutls-3.7.7.tar.xz": "be9143d0d58eab64dba9b77114aaafac529b6c0d7e81de6bdf1c9b59027d2106"
  }
 }

SPECS/gnutls/gnutls.spec

@@ -1,7 +1,7 @@
 Summary:        The GnuTLS Transport Layer Security Library
 Name:           gnutls
-Version:        3.7.3
-Release:        2%{?dist}
+Version:        3.7.7
+Release:        1%{?dist}
 License:        GPLv3+ AND LGPLv2.1+
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -94,6 +94,9 @@ sed -i 's/TESTS += test-ciphers-openssl.sh//'  tests/slow/Makefile.am
 %{_mandir}/man3/*
 
 %changelog
+* Tue Aug 09 2022 Andrew Phelps <anphel@microsoft.com> - 3.7.7-1
+- Update to version 3.7.7 to resolve CVE CVE-2022-2509
+
 * Tue Feb 15 2022 Cameron Baird <cameronbaird@microsoft.com> - 3.7.3-2
 - Build with p11-kit
 

cgmanifest.json

@@ -3980,8 +3980,8 @@
         "type": "other",
         "other": {
           "name": "gnutls",
-          "version": "3.7.3",
-          "downloadUrl": "https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.3.tar.xz"
+          "version": "3.7.7",
+          "downloadUrl": "https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.7.tar.xz"
         }
       }
     },