-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 14 Feb 2026 15:49:14 +0100
Source: gnutls28
Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym
Architecture: armel
Version: 3.7.9-2+deb12u6
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 gnutls-bin - GNU TLS library - commandline utilities
 guile-gnutls - GNU TLS library - GNU Guile bindings
 libgnutls-dane0 - GNU TLS library - DANE security support
 libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
 libgnutls28-dev - GNU TLS library - development files
 libgnutls30 - GNU TLS library - main runtime library
 libgnutlsxx30 - GNU TLS library - C++ runtime library
Closes: 1121146
Changes:
 gnutls28 (3.7.9-2+deb12u6) bookworm-security; urgency=high
 .
   * Add patch for CVE-2025-9820 / GNUTLS-SA-2025-11-18 from 3.8.11.
     Closes: #1121146
   * libgnutls: Fix name constraint processing performance issue
     Verifying certificates with pathological amounts of name constraints
     could lead to a denial of service attack via resource exhaustion.
     Reworked processing algorithms exhibit better performance
     characteristics. Reported by Tim Scheckenbach.
     [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831]
Checksums-Sha1:
 5c369d56a501419412dbd8fa8bdfcdc19795d14c 830556 gnutls-bin-dbgsym_3.7.9-2+deb12u6_armel.deb
 ab683060fab235f2f0db6dd675e08d87db886634 608760 gnutls-bin_3.7.9-2+deb12u6_armel.deb
 b5d4e1c1daa6c20b771127caf72ff120a11d044c 11297 gnutls28_3.7.9-2+deb12u6_armel-buildd.buildinfo
 d84cfaed86f91c18e5f5d1dcb3ec64e217e83874 257964 guile-gnutls-dbgsym_3.7.9-2+deb12u6_armel.deb
 d4d8625b6d800069338e7a4d20f45fbd1c730cc4 456284 guile-gnutls_3.7.9-2+deb12u6_armel.deb
 46ab2617ae76feab365a838279861066e1d02118 89360 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_armel.deb
 0a140bee410e829ce73fefeb2c4d8ecda7ee2d4e 402592 libgnutls-dane0_3.7.9-2+deb12u6_armel.deb
 837623489ff7e6f88f52f79fa1629175722ffa74 90900 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_armel.deb
 212df0548d749dcc4e1b8d6d0e6b172c8a083d0b 402432 libgnutls-openssl27_3.7.9-2+deb12u6_armel.deb
 a660f89a8122be0280a6380ad8bec8b54f02085f 1281816 libgnutls28-dev_3.7.9-2+deb12u6_armel.deb
 1a4158cc2605e8ea0b53938d35cf024639c9f605 2011312 libgnutls30-dbgsym_3.7.9-2+deb12u6_armel.deb
 23bba1c012427f5d328eff0d9e046281bf1b1631 1311872 libgnutls30_3.7.9-2+deb12u6_armel.deb
 73ca89e2d58427c406422df40375996d66b682e7 49064 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_armel.deb
 e986d1d65a4f36ecb5e37588acf429f9e753c226 11980 libgnutlsxx30_3.7.9-2+deb12u6_armel.deb
Checksums-Sha256:
 756ecf7eaf626044ecb1fbcc3c0ad1cdb891e05421bfc46f65748f8636234b8d 830556 gnutls-bin-dbgsym_3.7.9-2+deb12u6_armel.deb
 9c52867634dce52dd6d058c733a8e7269c008b8d930a8ece2f905e9f88bd0303 608760 gnutls-bin_3.7.9-2+deb12u6_armel.deb
 5c10a905db2dfe74afc0e344ba227d474b466d0e80e75a05eb627746c62b52d5 11297 gnutls28_3.7.9-2+deb12u6_armel-buildd.buildinfo
 b94a1c9284f6b151fbab5e9a505cbd9c9a059b89796501e904d005205a900bb8 257964 guile-gnutls-dbgsym_3.7.9-2+deb12u6_armel.deb
 a4dc88f13355e0026011f29792680f95737327da0ce0ec0a28036c3db858d0a7 456284 guile-gnutls_3.7.9-2+deb12u6_armel.deb
 97018f79e954e52af97997fe4b7a1f70c02e47000cfa2b6ceb2785643aa6c9a3 89360 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_armel.deb
 7d3ec98c07d2a3d72d237e0792c2f9ddd33c75d3ffef96f34a8cbbfd3fc1bd52 402592 libgnutls-dane0_3.7.9-2+deb12u6_armel.deb
 137f0b284a31e03f6c9f89a37e5934af2eb4b4cde1f04e7d95659c0423f35ef5 90900 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_armel.deb
 5f9243df8987993b152a137622d8ae3d1ec90907cc8e7f3f304390eb0dc6893c 402432 libgnutls-openssl27_3.7.9-2+deb12u6_armel.deb
 fe8aad49a2e693c083e589a032b1809b5205cfef3c360c5eca15352a82a543ee 1281816 libgnutls28-dev_3.7.9-2+deb12u6_armel.deb
 aa492dfaf9fcd330b35230df3f95ca2a4351a43b74d2b851bc85d72c096a432d 2011312 libgnutls30-dbgsym_3.7.9-2+deb12u6_armel.deb
 124678cb25daad19c529f25821586c7ce37eaa2982666d18dd29080b936dc3ab 1311872 libgnutls30_3.7.9-2+deb12u6_armel.deb
 71cd849f5fa54cf660b4261beb5fbeae7862631af089319b99c22aa178a24d09 49064 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_armel.deb
 2b76ca095cd3537240b95888a107a59a094bf321c71dfb56d7cb925bb747d1ac 11980 libgnutlsxx30_3.7.9-2+deb12u6_armel.deb
Files:
 656eb8d5279f4ac1727811a9b01e5be5 830556 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u6_armel.deb
 2db722a75ad3229824f492d717a3b29f 608760 net optional gnutls-bin_3.7.9-2+deb12u6_armel.deb
 98f21edfea7050ab30553d412736bf65 11297 libs optional gnutls28_3.7.9-2+deb12u6_armel-buildd.buildinfo
 c8d1229bf4c1ab35bce18edd599a1819 257964 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u6_armel.deb
 0d1e95c14a833dd9682144e5e6ac0643 456284 lisp optional guile-gnutls_3.7.9-2+deb12u6_armel.deb
 98dd01765b9145cbd129687adfa68adf 89360 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_armel.deb
 d07b9d8d0d521a6da73d2e674567c720 402592 libs optional libgnutls-dane0_3.7.9-2+deb12u6_armel.deb
 856d58376332a536ad8e276e7558def9 90900 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_armel.deb
 a4a4a5e642a6b24723d741b2d0681473 402432 libs optional libgnutls-openssl27_3.7.9-2+deb12u6_armel.deb
 2e4a21c04ac5e0e4b9ba6bcb99910ad7 1281816 libdevel optional libgnutls28-dev_3.7.9-2+deb12u6_armel.deb
 675fd881b796525040aa0ee7f7ceedb6 2011312 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u6_armel.deb
 eb4b10c0c20763bded3ccf6ae7b59fac 1311872 libs optional libgnutls30_3.7.9-2+deb12u6_armel.deb
 599119fc6993b55cb06f2028ce03a815 49064 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_armel.deb
 77a98b1f4b2d0d0bb5122185bfb6a748 11980 libs optional libgnutlsxx30_3.7.9-2+deb12u6_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmmSBsoACgkQ8U6eOZMp
j6+qiA//cYDrdJVjkdX19Uukf/+IWZP1w1tIfc5DAuD7c+an5JHsvmjEXJp/EvXb
1Y4Hnqxk9A+LO+Q+CT4MTW3gnBUwYfMX6zyjPErwBH9FOCdWPIUU6mpGB74Dn9m6
XqubPPazL/5oKekdZP6tdm/sqXQKZMJRLATTAGKqAC97+c6lCYgygl/yn530tqcX
aQE/ipr5cuxBywYRFg41Cey6iLWDLbTf3HYj/JtI9nyTY658hWlajosDVj1X8qvU
X/0W+NNOdpv8gf+GK9Eh3zQN9x4VvSAyDGmuM5tz1ona5UduY7Pza6VQUI0kfkYA
ro5+C7GlFdQU8XlRaXYL8HHNq5spkTKAxc26Yfj027Y9I2yQ6X7TaJvkgYouT+hW
kqR42e/yD7l+aGh6+rJAM8vm3Cc3DhMfQaKSvjFZ6U0kJhP9WhHjlJSiInwLMHLT
QdhDVAU842Q4ahC1WUZLw3eeEgjBHWDq68rrcc0ETnd6EUSJ8JisbVjvoqMwmXQz
39Wshmln+A3aZHnWp51+M9Qty7AXApRtv9PGH5AZLewm0xKdDZnJDoziH08cHWUW
9d1THPbk1s/5qVQsFXP/WYzRx/BCtnuMBFB9DRxEdNzhyQmhmzak3C+ZpEfvVrwu
MoFG9sEDZ4PaodPX0GL14YFciVzyfveXG+6cThch2ockYFVpGxQ=
=/4SJ
-----END PGP SIGNATURE-----