-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 10 May 2026 13:15:39 +0200
Source: gnutls28
Binary: gnutls-bin gnutls-bin-dbgsym libgnutls-dane0t64 libgnutls-dane0t64-dbgsym libgnutls-openssl27t64 libgnutls-openssl27t64-dbgsym libgnutls28-dev libgnutls30t64 libgnutls30t64-dbgsym
Architecture: s390x
Version: 3.8.9-3+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 gnutls-bin - GNU TLS library - commandline utilities
 libgnutls-dane0t64 - GNU TLS library - DANE security support
 libgnutls-openssl27t64 - GNU TLS library - OpenSSL wrapper
 libgnutls28-dev - GNU TLS library - development files
 libgnutls30t64 - GNU TLS library - main runtime library
Closes: 1135319
Changes:
 gnutls28 (3.8.9-3+deb13u4) trixie-security; urgency=high
 .
   * Add 3.8.13 patchset from CentOS 10 security release.
     Fixes
     CVE-2026-33846
     CVE-2026-42009
     CVE-2026-33845
     CVE-2026-42010
     CVE-2026-3833
     CVE-2026-42011
     CVE-2026-42012
     CVE-2026-42013
     CVE-2026-42014
     CVE-2026-5260
     CVE-2026-42015
     CVE-2026-3832
     CVE-2026-5419
     and also adds a couple of fixes for issues without CVEs assigned.
     (For Debian base64-encode a testfile, quilt does not support git binary
     patches.)
     Closes: #1135319
   * Drop patches irrelevant for 3.8.9 from the CentOS patchset.
     The PKCS#11 [provider] feature was only added in 3.8.10.
   * Cherry-pick another patch to add a mising declaration.
Checksums-Sha1:
 e9b9ada896d7a8ca13b936c672cd755ad4d2d6aa 938120 gnutls-bin-dbgsym_3.8.9-3+deb13u4_s390x.deb
 485627fa156d6161c4f902209df5bbfca5649e6c 680864 gnutls-bin_3.8.9-3+deb13u4_s390x.deb
 9fa16fa431a291ab8938dbed88933ab3e3faf056 9604 gnutls28_3.8.9-3+deb13u4_s390x-buildd.buildinfo
 34d375601402e3a902d86985e50de673ef6c2ca6 107152 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_s390x.deb
 5cc1d90d9b01d6f924c57516af18e4de91822f69 456152 libgnutls-dane0t64_3.8.9-3+deb13u4_s390x.deb
 15b626f889b8170b14ab51b4d2693770743bb257 107724 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_s390x.deb
 1e1da8fa9b474662f22d8d5433a383e8c7c17dad 456064 libgnutls-openssl27t64_3.8.9-3+deb13u4_s390x.deb
 988c0a52ccc83976c3fe414cdba97646b49b8ecc 1322256 libgnutls28-dev_3.8.9-3+deb13u4_s390x.deb
 e7b2d6f1734f313b899f8174515807df8122851a 2062012 libgnutls30t64-dbgsym_3.8.9-3+deb13u4_s390x.deb
 dd8aa868cc78b47aa071ceb865dedbda1fc16ad2 1386740 libgnutls30t64_3.8.9-3+deb13u4_s390x.deb
Checksums-Sha256:
 24c0960822a0f5789a0e3a4cf7c4a87cb084faa27579f6b4caa52eaf7003364f 938120 gnutls-bin-dbgsym_3.8.9-3+deb13u4_s390x.deb
 aab114494c951a840daccf875fba5edc956d33f5ee4f785361153741cc38c9e6 680864 gnutls-bin_3.8.9-3+deb13u4_s390x.deb
 26ea7e161810d5886bb05c4d367a3d6c5540f536ef4205d9bb32de3055ccd0d3 9604 gnutls28_3.8.9-3+deb13u4_s390x-buildd.buildinfo
 bad5feff336dd2e6b40f119e6f4ecd302d2c63136d30f6024ba6ec464bdd731a 107152 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_s390x.deb
 aebca12558afed80b8eabae75a7c26c22c0ddf24bb32b68b576acde45aa03760 456152 libgnutls-dane0t64_3.8.9-3+deb13u4_s390x.deb
 9dd102c0eb8f0fdb6ad042b57c8523cd34692ec4a022336baaf6b588ce6bb676 107724 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_s390x.deb
 94808878d66ed7c06947fa7dfd057b3140ccac2e5367b94d399427913170c1cf 456064 libgnutls-openssl27t64_3.8.9-3+deb13u4_s390x.deb
 db7bbccbb0be1ddfa45ea6937276e681d8eb2d3d62df53589aa2f1438f07eb1a 1322256 libgnutls28-dev_3.8.9-3+deb13u4_s390x.deb
 144ad7832defafb187fb6b629da3b6147afb49a9e86ee4dac82c5635db76779a 2062012 libgnutls30t64-dbgsym_3.8.9-3+deb13u4_s390x.deb
 e5ea87e2a553cd75036bbf2f4334793c100cf09fbb7e95cece11ff35baeabbb7 1386740 libgnutls30t64_3.8.9-3+deb13u4_s390x.deb
Files:
 c70353ecf1730151519ade011c75d4fd 938120 debug optional gnutls-bin-dbgsym_3.8.9-3+deb13u4_s390x.deb
 441e654c7b4854b4dacd2c1269e24ddc 680864 net optional gnutls-bin_3.8.9-3+deb13u4_s390x.deb
 4cfe556e09416f99b34097ea0ea08881 9604 libs optional gnutls28_3.8.9-3+deb13u4_s390x-buildd.buildinfo
 3c25f5bd3dee06eac7ac290052abf844 107152 debug optional libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_s390x.deb
 2d8170373f16e159fa9a8c93f2e4f080 456152 libs optional libgnutls-dane0t64_3.8.9-3+deb13u4_s390x.deb
 faba6da86bed41dc42a1b35a287bcf4b 107724 debug optional libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_s390x.deb
 d52489bcc3502ec44fe8c4162099aaf3 456064 libs optional libgnutls-openssl27t64_3.8.9-3+deb13u4_s390x.deb
 f17325aed76a5db79ff4ef57408dd969 1322256 libdevel optional libgnutls28-dev_3.8.9-3+deb13u4_s390x.deb
 3e72dec161ce9a1a482ab4445fbd3da6 2062012 debug optional libgnutls30t64-dbgsym_3.8.9-3+deb13u4_s390x.deb
 a7161741f8d29a55cc0df958c995e10e 1386740 libs optional libgnutls30t64_3.8.9-3+deb13u4_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=P5DX
-----END PGP SIGNATURE-----