-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 14 Feb 2026 15:49:14 +0100
Source: gnutls28
Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym
Architecture: arm64
Version: 3.7.9-2+deb12u6
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 gnutls-bin - GNU TLS library - commandline utilities
 guile-gnutls - GNU TLS library - GNU Guile bindings
 libgnutls-dane0 - GNU TLS library - DANE security support
 libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
 libgnutls28-dev - GNU TLS library - development files
 libgnutls30 - GNU TLS library - main runtime library
 libgnutlsxx30 - GNU TLS library - C++ runtime library
Closes: 1121146
Changes:
 gnutls28 (3.7.9-2+deb12u6) bookworm-security; urgency=high
 .
   * Add patch for CVE-2025-9820 / GNUTLS-SA-2025-11-18 from 3.8.11.
     Closes: #1121146
   * libgnutls: Fix name constraint processing performance issue
     Verifying certificates with pathological amounts of name constraints
     could lead to a denial of service attack via resource exhaustion.
     Reworked processing algorithms exhibit better performance
     characteristics. Reported by Tim Scheckenbach.
     [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831]
Checksums-Sha1:
 b93b51a62ce66d011e4cc883ae9d8604eeb44624 902396 gnutls-bin-dbgsym_3.7.9-2+deb12u6_arm64.deb
 7a58a0dc9903622056b180ce2d86ed662d7705cb 623844 gnutls-bin_3.7.9-2+deb12u6_arm64.deb
 85ba0d0b63e45731eb2c1948b979898a01a68849 11455 gnutls28_3.7.9-2+deb12u6_arm64-buildd.buildinfo
 b6a827c5dbaa5bccb9bbd324f91b5d358ba134f8 257328 guile-gnutls-dbgsym_3.7.9-2+deb12u6_arm64.deb
 473f5bfbc7a058167fd8285cc6ee081962cba4d9 457384 guile-gnutls_3.7.9-2+deb12u6_arm64.deb
 7b2a501106cb510275d0857364ed246b5525baff 90268 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_arm64.deb
 9880b1522b8007170b2ff8015fd07ae35dc731e7 404832 libgnutls-dane0_3.7.9-2+deb12u6_arm64.deb
 b65392c42a601a2abf9e1b0d91788f069bc84bf6 90816 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_arm64.deb
 a1586625cc8ec75e9ee63962c7fb002170ba6ae0 404828 libgnutls-openssl27_3.7.9-2+deb12u6_arm64.deb
 6870bddff9ba274efbc5866c3314bf7e22f03488 1363164 libgnutls28-dev_3.7.9-2+deb12u6_arm64.deb
 652506319d2dd08e22efb036b7f9d53b468569e0 2104628 libgnutls30-dbgsym_3.7.9-2+deb12u6_arm64.deb
 81ddc1a4fc6d36e67404dcb158f10d0e71e0c388 1316148 libgnutls30_3.7.9-2+deb12u6_arm64.deb
 ec62787c10e93c25f4968bfb03894059ed7951c6 48344 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_arm64.deb
 6718602a5d692a42fbdc669e145be515e9ad6b7b 13100 libgnutlsxx30_3.7.9-2+deb12u6_arm64.deb
Checksums-Sha256:
 8bed2740ed672da0af01b030a3a94a0c4fe9ac1e427d95d5a7bea0f8a558146d 902396 gnutls-bin-dbgsym_3.7.9-2+deb12u6_arm64.deb
 7e61f36fb7538f3c44edaf59a92a958bd2e1e422dd69c185885e807da5abaf76 623844 gnutls-bin_3.7.9-2+deb12u6_arm64.deb
 ca992b131ef0e4801b1688a5e3476ce43a8fbe21176a9a809572bb98ab8ee9c0 11455 gnutls28_3.7.9-2+deb12u6_arm64-buildd.buildinfo
 943d3f72fcb365f3732a8508f702900af44fdf56cbc3550cda3b0b46d377a6d5 257328 guile-gnutls-dbgsym_3.7.9-2+deb12u6_arm64.deb
 eb0779005fa49ab5f4e7c742b46b17c3213762a6240f12d6d639cf8e2ed95960 457384 guile-gnutls_3.7.9-2+deb12u6_arm64.deb
 bf4ade3e83d1b3aa3c645e9cb7178275af467256ab0b13a5e81ee4e10a720a85 90268 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_arm64.deb
 1b6436a9985ba8fdd9438be366e1ec4d450281731bb16feb9a77aa50244a853f 404832 libgnutls-dane0_3.7.9-2+deb12u6_arm64.deb
 36db625148ba75e86d46402cceafe6b5d221bbde0ed3c8ba57d3c81c3088b834 90816 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_arm64.deb
 8d5cb0cfed73751378c350019a6316b2e6a93544612fdcff036d293e6a964986 404828 libgnutls-openssl27_3.7.9-2+deb12u6_arm64.deb
 3ea09a0761ab69a20ae50b40bb18733381a06a8bf5f18b18814e4db00186f6e3 1363164 libgnutls28-dev_3.7.9-2+deb12u6_arm64.deb
 f3a548965174b318fe9c8ba9d871120c851cbc6a1a54b421ca661e26c3c0d9d8 2104628 libgnutls30-dbgsym_3.7.9-2+deb12u6_arm64.deb
 80c0f32c3fdfa316800d874172806b4bbf5b3e532b68bf3517ed5d34255cc569 1316148 libgnutls30_3.7.9-2+deb12u6_arm64.deb
 f94b814223c6317b8ce2441e7771deefbaec2ee15669ee16644ba7e9ee2ea7ed 48344 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_arm64.deb
 78757208fd83cbf68cbc1d29a490d8df1fe46c0c76a016f8288c7c8b35b38ccc 13100 libgnutlsxx30_3.7.9-2+deb12u6_arm64.deb
Files:
 ed714d5a6fe8c976bc66c0dc9ffc7ebf 902396 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u6_arm64.deb
 44aca5acd20c2780ef8317fbb0516353 623844 net optional gnutls-bin_3.7.9-2+deb12u6_arm64.deb
 594d6f662775f4bac9e4bfff6e9725ef 11455 libs optional gnutls28_3.7.9-2+deb12u6_arm64-buildd.buildinfo
 87c7c373bce0e5a531a39371923f937f 257328 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u6_arm64.deb
 56878a0828ef952d29b4ca89e8542686 457384 lisp optional guile-gnutls_3.7.9-2+deb12u6_arm64.deb
 14d8e68bbe6269814aa3be094647da77 90268 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_arm64.deb
 e4f7c0be8b072f5526672286fdfe95ab 404832 libs optional libgnutls-dane0_3.7.9-2+deb12u6_arm64.deb
 e1e33079548abbc099e6459dbb250740 90816 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_arm64.deb
 a6ac58aed60bb4a891b63870bd733f95 404828 libs optional libgnutls-openssl27_3.7.9-2+deb12u6_arm64.deb
 9b6f24fd74f3503fdded88d9f8dfe7cf 1363164 libdevel optional libgnutls28-dev_3.7.9-2+deb12u6_arm64.deb
 e68007d67fc761b2007ec20197eca80c 2104628 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u6_arm64.deb
 fb4dfc41268f178fefd10b8ec1239f3b 1316148 libs optional libgnutls30_3.7.9-2+deb12u6_arm64.deb
 9dd8c5decdcb0d9117d03ea3e072313c 48344 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_arm64.deb
 ff691ea6788fb3d9009325fcdbd904a7 13100 libs optional libgnutlsxx30_3.7.9-2+deb12u6_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=N/HF
-----END PGP SIGNATURE-----