-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 14 Mar 2026 07:19:14 +0100
Source: gnutls28
Architecture: source
Version: 3.8.9-3+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Closes: 1130152
Changes:
 gnutls28 (3.8.9-3+deb13u3) trixie; urgency=medium
 .
   [ Simon McVittie ]
   * d/p/51_handshake-only-shuffle-extensions-in-the-first-Client-Hel.patch:
     Preserve extension order across client Hello retry.
     This resolves an interop regression in 3.8.5 with servers that enforce
     the RFC requirement that the Client Hello after a Hello Retry Request
     has the same extensions as the original Client Hello, in the same order
     (Closes: #1130152)
Checksums-Sha1:
 a240c41569ff24495ba28f21ecf767da6404823b 3269 gnutls28_3.8.9-3+deb13u3.dsc
 a82ecd16b9dc98a9cb9f5b073e05adba087827c8 104292 gnutls28_3.8.9-3+deb13u3.debian.tar.xz
 383a05278723035668e02f515f0409e53c0bebf0 5928 gnutls28_3.8.9-3+deb13u3_source.buildinfo
Checksums-Sha256:
 5e2a16a2799734e49f8d1fa51d91a19c9522509516246dea673666f0cfd5340a 3269 gnutls28_3.8.9-3+deb13u3.dsc
 4f85a45e433139064d866a9dbe96a2f8d7b457ee6e2abe6afd36efb507b920ac 104292 gnutls28_3.8.9-3+deb13u3.debian.tar.xz
 05d57e6dedb627ac71137a1c6b50cb7296933b7fff7e705dbde307a13a6e1c7b 5928 gnutls28_3.8.9-3+deb13u3_source.buildinfo
Files:
 b8d3c43fe570f232ff137da7e66d0dfa 3269 libs optional gnutls28_3.8.9-3+deb13u3.dsc
 b22516fff5554276079ca638d9b1a720 104292 libs optional gnutls28_3.8.9-3+deb13u3.debian.tar.xz
 1ca299515822818228e10f2dc3c33b64 5928 libs optional gnutls28_3.8.9-3+deb13u3_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAmnIECcACgkQpU8BhUOC
FIR2yg//WJtxp9olM4ZUXEmVKI4N1V4oFOwyTAO/NM8qSk4vYQwdWZN1m/VpY/q2
au6qhF/4ysBifJzs1ZW9LRlhI4ZyOuy3amMEIlz3gDoA6AteMzyVB0FLzMeZOMHA
dqQbkKM/Cu8eOA+Gcqbt6AHK97tAKXNuzf0balwGvHF5uTQ57auEswWCObDpFzqp
djEZR5Xm6IG9T6guo1z8FRPHofSkpAm86W0I0DYwADQOZf22Vy4oYbkwX9jNsdY5
Q9yW8riZiM6xYwMR6WlxSG/4slHse9LQ2tWEItE03+cP1dWvUbBfsN+zlEhxWUKk
9vqB8+s5k6YGrcUB7JdvdtwJmJlnBBN6eMTXent91GwEogDreus+RGkmgb5aJk98
7VSOvAqhbDLNrYY6ZLrnIZWHuTZzlBRisAOkmBx+n4O9sj7wwuYA3/Q25o/TxYXY
PBqWHmHANgOrURugMpqdag/4dLCz46xqbGHUL4dWkXYZcwJZnJjPu2jqPBvawSQY
qUvutvif7H3BISXRUHwlhMB83oQSPKNYAAc/yIfTC5TUSC8+tyvsi8+3QKampy44
zn2m9/ENaZGxvJx3H46eH6cdA5UwdQv8z52GZVK+BiBUr3QvB6SSoHgesDf7hfQl
DakYgU+WieljkOsFpsWikI10LGqNqsEu3/13q1WtWspdKWrg04M=
=OqOt
-----END PGP SIGNATURE-----