-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 May 2026 13:15:39 +0200 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym libgnutls-dane0t64 libgnutls-dane0t64-dbgsym libgnutls-openssl27t64 libgnutls-openssl27t64-dbgsym libgnutls28-dev libgnutls30t64 libgnutls30t64-dbgsym Architecture: riscv64 Version: 3.8.9-3+deb13u4 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-manda-04) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities libgnutls-dane0t64 - GNU TLS library - DANE security support libgnutls-openssl27t64 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30t64 - GNU TLS library - main runtime library Closes: 1135319 Changes: gnutls28 (3.8.9-3+deb13u4) trixie-security; urgency=high . * Add 3.8.13 patchset from CentOS 10 security release. Fixes CVE-2026-33846 CVE-2026-42009 CVE-2026-33845 CVE-2026-42010 CVE-2026-3833 CVE-2026-42011 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-5260 CVE-2026-42015 CVE-2026-3832 CVE-2026-5419 and also adds a couple of fixes for issues without CVEs assigned. (For Debian base64-encode a testfile, quilt does not support git binary patches.) Closes: #1135319 * Drop patches irrelevant for 3.8.9 from the CentOS patchset. The PKCS#11 [provider] feature was only added in 3.8.10. * Cherry-pick another patch to add a mising declaration. Checksums-Sha1: 4fde52f9c71619b3554dd7dc879fc2026a195d4c 984452 gnutls-bin-dbgsym_3.8.9-3+deb13u4_riscv64.deb c92978eb1150c5cb62045d25f2489d7d285d0d45 688180 gnutls-bin_3.8.9-3+deb13u4_riscv64.deb 41db9c579c8882aeb8e6aebd7a3ad1deda3281ba 9722 gnutls28_3.8.9-3+deb13u4_riscv64-buildd.buildinfo 020a324f3bdea9313589925eb5df037e2fee324b 97992 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_riscv64.deb f949de4e92774adbeae67b63b383d52e9d7e027c 453776 libgnutls-dane0t64_3.8.9-3+deb13u4_riscv64.deb 9cc5312bd7c9d6c54e3aa46a309bfd18f92b6f8e 98372 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_riscv64.deb 92ea3692fb193b365fe909838abb187485630484 453752 libgnutls-openssl27t64_3.8.9-3+deb13u4_riscv64.deb bd0f5137221eea73c7a22c9e75377e69b014a84c 2615512 libgnutls28-dev_3.8.9-3+deb13u4_riscv64.deb a00cf352a7fd280b4e2668c55eba11ea241a7d69 1962412 libgnutls30t64-dbgsym_3.8.9-3+deb13u4_riscv64.deb 3d527821e6f0acd8538d397067939c20a31741f0 1447916 libgnutls30t64_3.8.9-3+deb13u4_riscv64.deb Checksums-Sha256: f0466ca87fec7f76298f017146a2984ce31d80506e54e22f5c5b9443fda3f0bb 984452 gnutls-bin-dbgsym_3.8.9-3+deb13u4_riscv64.deb e17d9866901b6ad48b2850ef71b62ecccc5d9788fa084e3c1ff88796faf07d8c 688180 gnutls-bin_3.8.9-3+deb13u4_riscv64.deb 5eac1cfc840b15b8c91080ff356d17ae15d19369f15230d13f44a18b16825b51 9722 gnutls28_3.8.9-3+deb13u4_riscv64-buildd.buildinfo daf34d6a8430756639d04ede3a0cfaa7d3a1c680eeb46549b7b96e96503b7f25 97992 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_riscv64.deb a1d1837e70a538e3073366a34ea4fc78e18167ab11fdb98008863429569dc62a 453776 libgnutls-dane0t64_3.8.9-3+deb13u4_riscv64.deb 39291d2613c9e1ee894e902e1c6be387b2a51e2216b3f72682ffa692ac85162c 98372 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_riscv64.deb 0ae5a20e65666313e37c014d5bccb67018dbb283e42c2f9934f20241f18abf1d 453752 libgnutls-openssl27t64_3.8.9-3+deb13u4_riscv64.deb 31c927cdd15ed3e4f1d271488f0f9cfe30525995380ab6319ad383d3828836b1 2615512 libgnutls28-dev_3.8.9-3+deb13u4_riscv64.deb 998537c788e8a3a33ec6a8827bf467e360d1ea4b7a37f26ae91c9ff50e85b5b5 1962412 libgnutls30t64-dbgsym_3.8.9-3+deb13u4_riscv64.deb 2afdbd6c5ec40b2981d95949b34d04a8b404245336485cc97ee09c29c4549f23 1447916 libgnutls30t64_3.8.9-3+deb13u4_riscv64.deb Files: 63024e9cc906a829610b3c5c3cba9c6f 984452 debug optional gnutls-bin-dbgsym_3.8.9-3+deb13u4_riscv64.deb 15f1b716080f9962f2cbbfce25b1395e 688180 net optional gnutls-bin_3.8.9-3+deb13u4_riscv64.deb 8b17029a77cf18789f34885e4d0a2810 9722 libs optional gnutls28_3.8.9-3+deb13u4_riscv64-buildd.buildinfo 49de3079701c6db701a8ec6003c993cd 97992 debug optional libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_riscv64.deb 098902a9e8169f47fb08893624de23fb 453776 libs optional libgnutls-dane0t64_3.8.9-3+deb13u4_riscv64.deb bae2dc4521bf3e2c6e6e730a0b5f723e 98372 debug optional libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_riscv64.deb 3b52a50fc930e4d0c0ad77351e2a1831 453752 libs optional libgnutls-openssl27t64_3.8.9-3+deb13u4_riscv64.deb b962b61539308503db5cd4f1bc133f86 2615512 libdevel optional libgnutls28-dev_3.8.9-3+deb13u4_riscv64.deb f27fbcde417b8cf4ce8eec8efe87f8ed 1962412 debug optional libgnutls30t64-dbgsym_3.8.9-3+deb13u4_riscv64.deb 12784e7aa7265532fb32b67bb659df52 1447916 libs optional libgnutls30t64_3.8.9-3+deb13u4_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpWtAFYomK/29mcYCqTndZcwOQoMFAmoAirUACgkQqTndZcwO QoOFNhAAk/iw/uqNt1M8/JyeaDnUyGqIsyxw6ceIooV5oAcJUX86RpPshsFCcv1A OgveB9BTYdr9nXImQfkJfXnEm4rdvD/0PwgT+rnoT66zSpG04GN/jgqIWbjwIDD0 fmJ4Z6FC/yAiRC7i25lIap0g/CA+rbV03PyMiiPz64uyI7w24q65svyVC2WFY4m7 UZ+RuT5yHiW2KsE9yF+566O0eiQ9SHnUVVShsJ/r7WXsugARWUWCDs61Bqn4Br75 MqDzHy+GWiHL4um4xtlV+K3T9yq0GrrNc/6z30nYh0ZrJhM/clE+9vEnVmiDBYww FdXMnIYYpxzT0le1DW1IXd5Gil0uxizU9u4iyu0XjZM8KPKTC+x1mjpnEZlzRncv ZwrJ7f4oRYQx8/bJrdblgkT2/7VqT1zvd2PWraIEld2XJobCFXHbW7ZqNereA3yY luZNy/nysrIzozg6V8gHNe5TWAF+kyANZZPttOsZqnWZZOLZzh0TB+rw4qiNw6fy WqpRC4FvvazXQGsCFoC4V0qfaXwVOrnzF/K2WXEgAgfaiOQ6LPK59EyoHia9Uunk 4ITRIVGCXFEPVx097NAEGpjfTxHU0aFR7jUn6NxSDaTWIv2lPsqkyYCbPF/uykLD 0602fmdkxpyH9UYEkHOX0a0gFC1KJXNJhbCIKIzh614J4P9wBls= =by7e -----END PGP SIGNATURE-----