-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 May 2026 13:15:39 +0200 Source: gnutls28 Binary: gnutls-doc Architecture: all Version: 3.8.9-3+deb13u4 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andreas Metzler Description: gnutls-doc - GNU TLS library - documentation and examples Closes: 1135319 Changes: gnutls28 (3.8.9-3+deb13u4) trixie-security; urgency=high . * Add 3.8.13 patchset from CentOS 10 security release. Fixes CVE-2026-33846 CVE-2026-42009 CVE-2026-33845 CVE-2026-42010 CVE-2026-3833 CVE-2026-42011 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-5260 CVE-2026-42015 CVE-2026-3832 CVE-2026-5419 and also adds a couple of fixes for issues without CVEs assigned. (For Debian base64-encode a testfile, quilt does not support git binary patches.) Closes: #1135319 * Drop patches irrelevant for 3.8.9 from the CentOS patchset. The PKCS#11 [provider] feature was only added in 3.8.10. * Cherry-pick another patch to add a mising declaration. Checksums-Sha1: 096d35b102deb12272a1443b3953983b7bad3a83 4731880 gnutls-doc_3.8.9-3+deb13u4_all.deb 8ae9ca00f79dc53e0e9ff9ec8145894475dee124 9342 gnutls28_3.8.9-3+deb13u4_all-buildd.buildinfo Checksums-Sha256: 36c03a13e64a3bc45530f570b2640b5c4c1ad3352029d2c3234a59964471e151 4731880 gnutls-doc_3.8.9-3+deb13u4_all.deb ff8ef706a7cb177ea161e6e418aa43092ab0571dc51009ebd5a07c4e201bcc00 9342 gnutls28_3.8.9-3+deb13u4_all-buildd.buildinfo Files: 3c69dee8b2fa407651c99a5cc741edc3 4731880 doc optional gnutls-doc_3.8.9-3+deb13u4_all.deb 75ca5a34164a18d9fd00c1d43de147bb 9342 libs optional gnutls28_3.8.9-3+deb13u4_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmoAeZoACgkQPkCWRKsh 20fk0g//cItDD7RiwiVOTIm4MObV39q/WjCvRLC+3/1ALTKR7UJ0m4AK7i5UUsym Jk8wKzVKJ4PZsmiaPFdQ2mSrQb0cfjT3rfHcjx8KWD0g+sUb1p6TRiI0lJ+mUDLx ZRzfn4lTFd7Pzxwonp/5F8JUUyqBE2XoYPaH3vo4mPU5sJPiLlmnMe04xgO/l8BQ 63t1AGmfxBw60xhMg9XLPRCc9pvUhXefgOOe3X4rSt2548lksia7/DGWjlKoLpnz 8Y2EPRjjNJhWGasvn7Q5Kkr4yP8FGjx8AEHB0x9ixxv2E/D7enk7GBej6uY3QoQN cz3Zx1aFlyZFF/M8b13hck3WrUS3rmhnaJfLuXD3YWdxrqcehYIIl6fRCk/2SpjO raXJE5TUaUexwtNe0za3FRRZwe2rWbpxYshpu2mHsqcHknR20/o3hNZyg3p/cNhm rxLQch13GaIrcZAXkt6vu5DNkBz+iaTho3wsSbmUYFQxfzfaIF4gfsNW0SqtZSIr i5EMPrEy6IZSRtZGl8bhcL2hHpVY4w+I1ZFAVoiQQQgla7omPDt8MQoWjzUgmu9z w6h2/+ywA7+48Rt0KoWxBLNVWEfMp8odXGM1NVZLNULUH6LEaaehb9FGkOTI+uTj PDHbKCcAfaVXV4hHOeEm1UE8QICAKh5CxDU1LxaunNjNGRyraUo= =pCGF -----END PGP SIGNATURE-----