-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 14 Feb 2026 15:49:14 +0100
Source: gnutls28
Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym
Architecture: s390x
Version: 3.7.9-2+deb12u6
Distribution: bookworm-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 gnutls-bin - GNU TLS library - commandline utilities
 guile-gnutls - GNU TLS library - GNU Guile bindings
 libgnutls-dane0 - GNU TLS library - DANE security support
 libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
 libgnutls28-dev - GNU TLS library - development files
 libgnutls30 - GNU TLS library - main runtime library
 libgnutlsxx30 - GNU TLS library - C++ runtime library
Closes: 1121146
Changes:
 gnutls28 (3.7.9-2+deb12u6) bookworm-security; urgency=high
 .
   * Add patch for CVE-2025-9820 / GNUTLS-SA-2025-11-18 from 3.8.11.
     Closes: #1121146
   * libgnutls: Fix name constraint processing performance issue
     Verifying certificates with pathological amounts of name constraints
     could lead to a denial of service attack via resource exhaustion.
     Reworked processing algorithms exhibit better performance
     characteristics. Reported by Tim Scheckenbach.
     [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831]
Checksums-Sha1:
 1b05a27266fa08162021201bbc1f6263650188d9 823412 gnutls-bin-dbgsym_3.7.9-2+deb12u6_s390x.deb
 fba8fb0c76d68b5056bf3b436541283fc4d5bd68 621112 gnutls-bin_3.7.9-2+deb12u6_s390x.deb
 871ae6da54c09997aaeaa4b9432dd12d508c11e8 11343 gnutls28_3.7.9-2+deb12u6_s390x-buildd.buildinfo
 113e8b3e7818b5d78bb1815b72a55e7cd345083e 255340 guile-gnutls-dbgsym_3.7.9-2+deb12u6_s390x.deb
 2f42d22c9f726dd904d5c9ff850183b24439e58b 458208 guile-gnutls_3.7.9-2+deb12u6_s390x.deb
 91a6aff128ca11cd616430daebd2ed50b8c81cfc 89984 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_s390x.deb
 950fc5341f118215e2f79e7b3207cf5a8dc3241a 405200 libgnutls-dane0_3.7.9-2+deb12u6_s390x.deb
 634b8771f43f10185b3ebd146c07f4c1318897e7 91024 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_s390x.deb
 8708bb37e39169f3d531d7a3286a964be71d3b04 405328 libgnutls-openssl27_3.7.9-2+deb12u6_s390x.deb
 76022679c0723f1a255a969e1e7749cb65d4f1af 1228332 libgnutls28-dev_3.7.9-2+deb12u6_s390x.deb
 38e07dd618fc9a0d207b6dfc3dd79e0f79f30fe1 1954784 libgnutls30-dbgsym_3.7.9-2+deb12u6_s390x.deb
 0eeef720ddb9fa355711a6ffae7a9d2f1e14dbf1 1285264 libgnutls30_3.7.9-2+deb12u6_s390x.deb
 f02368ea70a34fb788d0b579b65869155ce475b6 48292 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_s390x.deb
 2c7f3b6c8fff8a4ea35fca3a03f85250cd86d9b0 13688 libgnutlsxx30_3.7.9-2+deb12u6_s390x.deb
Checksums-Sha256:
 e55ce90ad2fc989314e3ca3527c0c2b1656e54fa2703e76fa16c64ce91fcc81f 823412 gnutls-bin-dbgsym_3.7.9-2+deb12u6_s390x.deb
 d42cb5ad5cf508ab606fb53fd9e88d1caace70e7564ce10a75fc260352baf317 621112 gnutls-bin_3.7.9-2+deb12u6_s390x.deb
 91b114386263e62c1efe1647c9b1395d64011bcc4a9e286898d60d2c648c21bf 11343 gnutls28_3.7.9-2+deb12u6_s390x-buildd.buildinfo
 56031ba538c11a324584347337cb55df675a3908e654bb1cb6bf9836e0d7b076 255340 guile-gnutls-dbgsym_3.7.9-2+deb12u6_s390x.deb
 5371a313be3d60a20e39d684a56d064c07c8d42ca58cb29ecd207ae3e63a5a76 458208 guile-gnutls_3.7.9-2+deb12u6_s390x.deb
 c256b47e92bbfe2096310c3bf760cee511a77cd5c7a9ec6493b142a3f957773a 89984 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_s390x.deb
 5f84786943cb030be4524160ed926ebbe2ea3c09ab52d1138570032a016a3cbb 405200 libgnutls-dane0_3.7.9-2+deb12u6_s390x.deb
 d739174e42cf504b1a1abb87e17ede44db5b3473123f73d7f792f5981b9f32c0 91024 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_s390x.deb
 40644742da0ddc982020e3b7c617848c6033afa8e1f1643923a4a3bf957f2fb9 405328 libgnutls-openssl27_3.7.9-2+deb12u6_s390x.deb
 84d1e897a2c89f87274ee8b6fcdc3ac898da00fd91b433abeed73c6660185ca7 1228332 libgnutls28-dev_3.7.9-2+deb12u6_s390x.deb
 7ff005d5e70d1e13623a7a56a05ba060895e7b31a0f4125bd240d8118d617af4 1954784 libgnutls30-dbgsym_3.7.9-2+deb12u6_s390x.deb
 eb1afa96a3677b1a051ad0b73249ccc0c5aaf8615676f4db4b2fecfd15974da0 1285264 libgnutls30_3.7.9-2+deb12u6_s390x.deb
 affdf0b579a733f911bcbcfc5e2cc1e29595376c44c3a6674e1896ac13bffc6a 48292 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_s390x.deb
 b4154c446583709c0f0ecc5b9564af01164f593ee450a1711b40dc15d91da094 13688 libgnutlsxx30_3.7.9-2+deb12u6_s390x.deb
Files:
 95a9caae3c275a2954f189fe261a209e 823412 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u6_s390x.deb
 fb44367e29614c80d957c95ad78881b1 621112 net optional gnutls-bin_3.7.9-2+deb12u6_s390x.deb
 ccb91e92752d9435b2d4323533b8f6bd 11343 libs optional gnutls28_3.7.9-2+deb12u6_s390x-buildd.buildinfo
 4791d2e8ca5b4d3f13285c0624a0fbd8 255340 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u6_s390x.deb
 9c14e9511f93f199705e4145c665e82f 458208 lisp optional guile-gnutls_3.7.9-2+deb12u6_s390x.deb
 666d73153c92ad51c6cef746b740a015 89984 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_s390x.deb
 70b8fd1b1287da5a9907b97959b6825b 405200 libs optional libgnutls-dane0_3.7.9-2+deb12u6_s390x.deb
 387c1021ff0672ac8b02997e232c5902 91024 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_s390x.deb
 be018a2c5fef4f9c5e88f35f612c65af 405328 libs optional libgnutls-openssl27_3.7.9-2+deb12u6_s390x.deb
 0a7c5b06cf69504eac6a7c91b4bddfdc 1228332 libdevel optional libgnutls28-dev_3.7.9-2+deb12u6_s390x.deb
 f4035c600700097e47af959bfe5ff455 1954784 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u6_s390x.deb
 47ab4d2e90253bffff343b38d22c5681 1285264 libs optional libgnutls30_3.7.9-2+deb12u6_s390x.deb
 702c8b8a113b76aece12aa6ee4e4c54a 48292 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_s390x.deb
 4a4ec7f5dc60139418027ccbaee0a8e1 13688 libs optional libgnutlsxx30_3.7.9-2+deb12u6_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=pV+S
-----END PGP SIGNATURE-----