-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 10 May 2026 13:15:39 +0200
Source: gnutls28
Binary: gnutls-bin gnutls-bin-dbgsym libgnutls-dane0t64 libgnutls-dane0t64-dbgsym libgnutls-openssl27t64 libgnutls-openssl27t64-dbgsym libgnutls28-dev libgnutls30t64 libgnutls30t64-dbgsym
Architecture: i386
Version: 3.8.9-3+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 gnutls-bin - GNU TLS library - commandline utilities
 libgnutls-dane0t64 - GNU TLS library - DANE security support
 libgnutls-openssl27t64 - GNU TLS library - OpenSSL wrapper
 libgnutls28-dev - GNU TLS library - development files
 libgnutls30t64 - GNU TLS library - main runtime library
Closes: 1135319
Changes:
 gnutls28 (3.8.9-3+deb13u4) trixie-security; urgency=high
 .
   * Add 3.8.13 patchset from CentOS 10 security release.
     Fixes
     CVE-2026-33846
     CVE-2026-42009
     CVE-2026-33845
     CVE-2026-42010
     CVE-2026-3833
     CVE-2026-42011
     CVE-2026-42012
     CVE-2026-42013
     CVE-2026-42014
     CVE-2026-5260
     CVE-2026-42015
     CVE-2026-3832
     CVE-2026-5419
     and also adds a couple of fixes for issues without CVEs assigned.
     (For Debian base64-encode a testfile, quilt does not support git binary
     patches.)
     Closes: #1135319
   * Drop patches irrelevant for 3.8.9 from the CentOS patchset.
     The PKCS#11 [provider] feature was only added in 3.8.10.
   * Cherry-pick another patch to add a mising declaration.
Checksums-Sha1:
 1603570f6b3ca21e50bad2d026a5d79090d65fc1 928080 gnutls-bin-dbgsym_3.8.9-3+deb13u4_i386.deb
 007c58223df5354171e5dad1c68d0c9064e13ea1 697168 gnutls-bin_3.8.9-3+deb13u4_i386.deb
 5257d0733112b8f4483e230b4032f41d71490391 9616 gnutls28_3.8.9-3+deb13u4_i386-buildd.buildinfo
 b38522377ee7e780b239f9e2c54471e6ab3cace2 89700 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_i386.deb
 7f9e11083a03fa6cb2597a50b80776eba2fe1f11 454056 libgnutls-dane0t64_3.8.9-3+deb13u4_i386.deb
 ff38482d5b58445fd89d08cd7d760b47da4bd268 89680 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_i386.deb
 c65951687184855ce2307706414ffd16e61d6d4d 454104 libgnutls-openssl27t64_3.8.9-3+deb13u4_i386.deb
 e45da41de0f4556f0ce2ee92f91528b7a139670b 1472128 libgnutls28-dev_3.8.9-3+deb13u4_i386.deb
 d6a6766b2e2fb3eedea08c2b2607aef92acec20f 1789620 libgnutls30t64-dbgsym_3.8.9-3+deb13u4_i386.deb
 e62796f7661bf183e7a94ebdb345a7fa78de6520 1466740 libgnutls30t64_3.8.9-3+deb13u4_i386.deb
Checksums-Sha256:
 969ae851cf22cc1fdb2f7c138732ddc4542d2311e220cd83687d7dd0e65f5f96 928080 gnutls-bin-dbgsym_3.8.9-3+deb13u4_i386.deb
 add42d61ce427dd5f7c025fbdd9cbbe6e95ec326bf12e68b78c3d8dd08262136 697168 gnutls-bin_3.8.9-3+deb13u4_i386.deb
 d0de0f1c377af17aaace802ad981824807fa45b5d45a4256211563ccbcbb15e8 9616 gnutls28_3.8.9-3+deb13u4_i386-buildd.buildinfo
 7abcb032bbb32fb9e615e2601687a20d5762a85e0f85b3458772a3ddec933762 89700 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_i386.deb
 252961ec23fff3762b49b996a089bf8f5040e043b81eb7adcf4dd2a3e3ada201 454056 libgnutls-dane0t64_3.8.9-3+deb13u4_i386.deb
 227c7acd24a83883b0aa912cfc2cc1ac7897dd8b72f704e5a77841445994eba4 89680 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_i386.deb
 ae92eb09c236e222bf31af8b38d0a08fca319ae379762ccad57617cf09bfcff8 454104 libgnutls-openssl27t64_3.8.9-3+deb13u4_i386.deb
 53889687861f6425f37817092157ee8ffe1d97c2e7f81cdb3dcad99c9abd22d5 1472128 libgnutls28-dev_3.8.9-3+deb13u4_i386.deb
 bf5925d4a0d31148fccea8b1e106e4c4170a101b2d916d445735c500a7ac63d8 1789620 libgnutls30t64-dbgsym_3.8.9-3+deb13u4_i386.deb
 8cf569d66f972184d90bdb424eb5b0af1245df4abb15f229d30b6c905d565265 1466740 libgnutls30t64_3.8.9-3+deb13u4_i386.deb
Files:
 31192a7d240a67dd8ac1cfeecef11149 928080 debug optional gnutls-bin-dbgsym_3.8.9-3+deb13u4_i386.deb
 fe9f061f1470fb3a56cc387162a5d618 697168 net optional gnutls-bin_3.8.9-3+deb13u4_i386.deb
 596c43c9a62b7b140aa84c8944ccec4c 9616 libs optional gnutls28_3.8.9-3+deb13u4_i386-buildd.buildinfo
 b14e18f88a992b520324d2781fadcb98 89700 debug optional libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_i386.deb
 ef7d5df367ca17dd2e10c7342ff9d957 454056 libs optional libgnutls-dane0t64_3.8.9-3+deb13u4_i386.deb
 35eb5520a94d09c65e1a7037312bf501 89680 debug optional libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_i386.deb
 7b7c5d9480028a1dce41f61cc118dbba 454104 libs optional libgnutls-openssl27t64_3.8.9-3+deb13u4_i386.deb
 540fdcaeeb54fce3e9d37bca5b8ec3ba 1472128 libdevel optional libgnutls28-dev_3.8.9-3+deb13u4_i386.deb
 bd5de7cb5135f783cc8ec7d94f45df5a 1789620 debug optional libgnutls30t64-dbgsym_3.8.9-3+deb13u4_i386.deb
 7e21caa6c5463688db47e1c2bccff48e 1466740 libs optional libgnutls30t64_3.8.9-3+deb13u4_i386.deb

-----BEGIN PGP SIGNATURE-----
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=RC1a
-----END PGP SIGNATURE-----