-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Feb 2026 15:49:14 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym Architecture: mipsel Version: 3.7.9-2+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx30 - GNU TLS library - C++ runtime library Closes: 1121146 Changes: gnutls28 (3.7.9-2+deb12u6) bookworm-security; urgency=high . * Add patch for CVE-2025-9820 / GNUTLS-SA-2025-11-18 from 3.8.11. Closes: #1121146 * libgnutls: Fix name constraint processing performance issue Verifying certificates with pathological amounts of name constraints could lead to a denial of service attack via resource exhaustion. Reworked processing algorithms exhibit better performance characteristics. Reported by Tim Scheckenbach. [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831] Checksums-Sha1: c9f11e2c36c15505c6a3a811423fa0ca56e8eb8c 856524 gnutls-bin-dbgsym_3.7.9-2+deb12u6_mipsel.deb efd33015cd71eac1760a96ea64576d3dfbeb98f2 623988 gnutls-bin_3.7.9-2+deb12u6_mipsel.deb 03efc03a4edbbf036f80d4c3aa61187fd3f9096a 11270 gnutls28_3.7.9-2+deb12u6_mipsel-buildd.buildinfo b22fd144f49777aa4a01587e6537120e5dee48cd 267540 guile-gnutls-dbgsym_3.7.9-2+deb12u6_mipsel.deb f39cce3c91bdcf31912520d084c728aaada24386 448996 guile-gnutls_3.7.9-2+deb12u6_mipsel.deb 6afec8b01758472a2dfb9d60863fb13e93eb49ac 93004 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_mipsel.deb 6f31cf69309d388c45e2d04d32bdcbbf9a85004b 403192 libgnutls-dane0_3.7.9-2+deb12u6_mipsel.deb a864af307ab71e2b85f26df4cfef558c892f6966 94060 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_mipsel.deb ce47875b00e3d64497d73cfed64989ee68c3a506 402908 libgnutls-openssl27_3.7.9-2+deb12u6_mipsel.deb d9b7016ddcc25a8405a6861b7e01ab6ed4de5e67 1358640 libgnutls28-dev_3.7.9-2+deb12u6_mipsel.deb 86c47026e580c2a552ae420688e3e02e0b9657e8 2014976 libgnutls30-dbgsym_3.7.9-2+deb12u6_mipsel.deb b1968d59fa0a20e158b741f09229eb99fac8b547 1236424 libgnutls30_3.7.9-2+deb12u6_mipsel.deb 8f73c8ad237b4d11b749816e8c77687a4a03fae9 48084 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_mipsel.deb 57a1ca4571c2a8ac64d9979e1f09f762fb677ada 12964 libgnutlsxx30_3.7.9-2+deb12u6_mipsel.deb Checksums-Sha256: 6062e6ec7e71cb2e95e5b656db504f1b011a7f5cb0b096c22e139ca110b35bba 856524 gnutls-bin-dbgsym_3.7.9-2+deb12u6_mipsel.deb 40ae8a41b64cc6b375c9e6e39e1122d2d610923a05603e6a0ef3b3afe779e1f0 623988 gnutls-bin_3.7.9-2+deb12u6_mipsel.deb 20982cb0188bd65712d54d6ced7f4ba54f0715ac615b2a4d278e680138af8ab8 11270 gnutls28_3.7.9-2+deb12u6_mipsel-buildd.buildinfo b82d7e8daf91444657f8c3f931da151a69cc95cb77e641e55abccd1f04c64c09 267540 guile-gnutls-dbgsym_3.7.9-2+deb12u6_mipsel.deb b35c292450c3eed89b74e874e56bc287ee5e7ef42c77b8c49ff4ea9f7e9ec314 448996 guile-gnutls_3.7.9-2+deb12u6_mipsel.deb 1822646c27a1fdbd32b5a368550f3d2a0a61ad6bac3e733912bf8fe550d789a5 93004 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_mipsel.deb 0cc05dc3e6f37adc77a62032a1ce175522cb8101876b52f811c78988a89c2d46 403192 libgnutls-dane0_3.7.9-2+deb12u6_mipsel.deb 2027232d5856939288c5b316ef3e8ce0010fffeb50415b5b24b41bcd775d76bb 94060 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_mipsel.deb 1bc52343743602fae819f22ea99f22cc9da24327c89a84297029ed5a2880e6a4 402908 libgnutls-openssl27_3.7.9-2+deb12u6_mipsel.deb 0fc63ef96cf3f331f72958b9a672c4f63bf361b3a3245960bea7f75e5057128d 1358640 libgnutls28-dev_3.7.9-2+deb12u6_mipsel.deb ab6edce86cb5ab50f90b1702d1c9d2b4e4bf8502fd24b97fe9245925a0ba44b8 2014976 libgnutls30-dbgsym_3.7.9-2+deb12u6_mipsel.deb 9cb3a52d599fea7c01e49afdac414240785ae0a1ad3e8217608ff803c46497f5 1236424 libgnutls30_3.7.9-2+deb12u6_mipsel.deb 43b111ad0d2b6137e82e49618f3e90469a08230aba245933a84e67be0330b41f 48084 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_mipsel.deb d74321d68da429d3b07edeac466a96e82b940d88cfe859d85aff06d70cc8af70 12964 libgnutlsxx30_3.7.9-2+deb12u6_mipsel.deb Files: 183b43eaace4bd717c364a0507d4d0a9 856524 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u6_mipsel.deb 1cab5e055cd97bb941e7ee244e83b806 623988 net optional gnutls-bin_3.7.9-2+deb12u6_mipsel.deb 6219b8e604678b55b5951114f4fc2929 11270 libs optional gnutls28_3.7.9-2+deb12u6_mipsel-buildd.buildinfo 28d1ff0a63bc045cd6b8908451d2a8a3 267540 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u6_mipsel.deb a04c14280e5175df9617d6f8619af579 448996 lisp optional guile-gnutls_3.7.9-2+deb12u6_mipsel.deb 4fc4d08d9663f9c64dd5808dbe5657a2 93004 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_mipsel.deb 176f66c3909894176d8266a8c1aaf92d 403192 libs optional libgnutls-dane0_3.7.9-2+deb12u6_mipsel.deb 78d375303da4fbd8c96c5ef14a24387f 94060 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_mipsel.deb b9e55b594b35d6cf043cafae0c80c4db 402908 libs optional libgnutls-openssl27_3.7.9-2+deb12u6_mipsel.deb e53f9d7aa7087512b56da9fd5f53d098 1358640 libdevel optional libgnutls28-dev_3.7.9-2+deb12u6_mipsel.deb 0d9e6f2c1333707736395891f9aba652 2014976 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u6_mipsel.deb 55553317dc2513024cf64fde909e1544 1236424 libs optional libgnutls30_3.7.9-2+deb12u6_mipsel.deb 144aa20c7462bceb221096184c15bda8 48084 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_mipsel.deb 36ea6453af4913b79c5e33c76eb4407a 12964 libs optional libgnutlsxx30_3.7.9-2+deb12u6_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYLhEzFkGpb3yYRVHmlVdU6AM9BUFAmmSCcQACgkQmlVdU6AM 9BX13BAAj+5hgGHHozwje7+MkvXA/XktB+YSpOx+RzK2vAxw3dyJMU6hV3fn5q/E +pbx6zwLP/Ycxlgk/IAmFuMz+xK+Zyhz8r5dCkgOSfrVI3gmjApoBExXgx/KskQk qsY6sK342tPA2g39xnvICTA0MggjWa8WNMTpNUIBLTwubeMMhfPPbYcOaaXauf/0 Nqte5fK8PvUvbuUhwimh/ZtlaVEPjJ/8E9c+sRNeEtzUpxC0JR9Bg/yqEfTwDi73 m9nFmpWKIVrS2ays7toHfB0xRgu4noniFzjXvEKhfVUzwf2FG3CpKbUa5noFMnlb uW+Y74tX6frMZQuxg8m2cjG4LOlgsJ+0br6x2xfDC8oMeogtdqTrdNv4i2zO4aCj sR4YNXg/44q/D0RPYNBcYWfNaZGPcO29o9y3mZYwENadXvBNkNXpLGUaEy6jFWpy 08G7GAGep1Ei2UnrVF8aFVVzEPuxl5N4K0VPdH8fzkqJOIEKNavOMdmiNUcs5b69 uLyszy9B8amNzr7dbYkXH+0JCjnGrNAZGkgoyhoqTVf5N2DdXil4iZyzFRZ12YmM nvnzTKBSUf7nM20Rh9bPDJI/TcyecQ+MfsyihBFhtifjvKL3SJtDlVylnQkdlSpa +jR4Y/02ojB7fV1N3wYSPQnmRHXcvk1KPql+EwyVBS0INX/EuaM= =5KSO -----END PGP SIGNATURE-----