-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Feb 2026 15:49:14 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym Architecture: mips64el Version: 3.7.9-2+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx30 - GNU TLS library - C++ runtime library Closes: 1121146 Changes: gnutls28 (3.7.9-2+deb12u6) bookworm-security; urgency=high . * Add patch for CVE-2025-9820 / GNUTLS-SA-2025-11-18 from 3.8.11. Closes: #1121146 * libgnutls: Fix name constraint processing performance issue Verifying certificates with pathological amounts of name constraints could lead to a denial of service attack via resource exhaustion. Reworked processing algorithms exhibit better performance characteristics. Reported by Tim Scheckenbach. [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831] Checksums-Sha1: 46c03e548a520a1dc04c6e7d42047798a2bdda45 872064 gnutls-bin-dbgsym_3.7.9-2+deb12u6_mips64el.deb e5a0679b49a7ebb02ad8cb2932ec6d70e46f09fa 620292 gnutls-bin_3.7.9-2+deb12u6_mips64el.deb 5be7953dff8e717dd23f1846aea96946d7589ba1 11359 gnutls28_3.7.9-2+deb12u6_mips64el-buildd.buildinfo e3925fb32c26680929bba87663f7d3704e7e4bee 274088 guile-gnutls-dbgsym_3.7.9-2+deb12u6_mips64el.deb ff75782398ab9826b07ad4bed75bd0b71b1ec556 451580 guile-gnutls_3.7.9-2+deb12u6_mips64el.deb 416d0c123796c94a96e58460f85deb4b224d1034 95248 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_mips64el.deb 74484f2a6eeb34860717978f1e3699a24047055e 404468 libgnutls-dane0_3.7.9-2+deb12u6_mips64el.deb 63d3f6bc3fb5526a337678bf750ca4839617985e 96396 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_mips64el.deb 7cb0b9c2db51a976bf6a0490b206e751b4c2bacd 404144 libgnutls-openssl27_3.7.9-2+deb12u6_mips64el.deb c2ca90ca8ade356f00e5b1ee5765c3f55f5dcb46 1360548 libgnutls28-dev_3.7.9-2+deb12u6_mips64el.deb 8287231a4af8c9f7e883572f90f77bd857a68708 2061472 libgnutls30-dbgsym_3.7.9-2+deb12u6_mips64el.deb 44bce4822a8a32703b8ea8ae3519bcb2eee10c8c 1232008 libgnutls30_3.7.9-2+deb12u6_mips64el.deb 7632df03965afb631a23197fff3c7e5f0937ab81 49100 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_mips64el.deb 6084df457871be42d98dbe375986f7fa65ec5166 13112 libgnutlsxx30_3.7.9-2+deb12u6_mips64el.deb Checksums-Sha256: 67d43dd8db294575d21e973fdc85be2fb8f6d96e5bb04eb6fcc2710008b9694d 872064 gnutls-bin-dbgsym_3.7.9-2+deb12u6_mips64el.deb e9ea059dc62147adf322ab048f5b35d2e9847cbc22df7648257fa8bd6434f9d4 620292 gnutls-bin_3.7.9-2+deb12u6_mips64el.deb 237722709d1f8fb77f6269afa123383306b296710eacbc06d3d7da01b4ca3245 11359 gnutls28_3.7.9-2+deb12u6_mips64el-buildd.buildinfo 03bba7248f78a1f251f80ea0aa182c77988ae86f52a760498b5d8019a4a477ce 274088 guile-gnutls-dbgsym_3.7.9-2+deb12u6_mips64el.deb 47d4cc8ab86216f2e2bb50985160abb43e241f9eebcc0eed363bed1fa717e034 451580 guile-gnutls_3.7.9-2+deb12u6_mips64el.deb ffbeb53cbdd97c25c480925c1b0fbbb17e4c4ba6e087e43e879ad26306189f86 95248 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_mips64el.deb 3d28a1a521777ac48d5bec01240f77db071bdf33cbee062b63bffcc048086793 404468 libgnutls-dane0_3.7.9-2+deb12u6_mips64el.deb 5a4700c225eba043f548d7f99b889d652392b9fcc87749c50314b235b4163b1d 96396 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_mips64el.deb f4dbd78e631e6efb0a8aac4d1b33b0aed0cde2de0c4df6e759560da0ff237df4 404144 libgnutls-openssl27_3.7.9-2+deb12u6_mips64el.deb c4463fcff5e25a5e629f95d664b1488308fb8e74ee1a05a2c6b5591589cbcf80 1360548 libgnutls28-dev_3.7.9-2+deb12u6_mips64el.deb 5c85b4e1bc5f67e4248bb90eb10ad137d44cbd94079362270c9ee1b11e454765 2061472 libgnutls30-dbgsym_3.7.9-2+deb12u6_mips64el.deb 3100ef5995d256b332daff5b452e215b7d6a337d12cf084673402f257034306e 1232008 libgnutls30_3.7.9-2+deb12u6_mips64el.deb dcc2d9c9c96cab17b812d512b40af9b28249f552f55d3809aae41b247395cda5 49100 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_mips64el.deb aa8aca5ee2102af5d94a0f3c6848ecf466a66c115f45726159834dfc64c10d46 13112 libgnutlsxx30_3.7.9-2+deb12u6_mips64el.deb Files: 83c874ebeaad93469ddc26aa3fe45357 872064 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u6_mips64el.deb 7a91cd2eac4c4afc9757ff7ff26144d4 620292 net optional gnutls-bin_3.7.9-2+deb12u6_mips64el.deb dd598b1e8a44603d08efbca2ab4051f2 11359 libs optional gnutls28_3.7.9-2+deb12u6_mips64el-buildd.buildinfo fbe047b97eb8ef7811d07afff61b1a6a 274088 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u6_mips64el.deb e8782f976e882cd2d1b7354f8bcf0a24 451580 lisp optional guile-gnutls_3.7.9-2+deb12u6_mips64el.deb 18a033c1680dc776ee260a9cf7d2bf9f 95248 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_mips64el.deb 2d4c15a3b8b354f8cfab286ca5db4f18 404468 libs optional libgnutls-dane0_3.7.9-2+deb12u6_mips64el.deb 4759a047445fc27869307ca828806fda 96396 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_mips64el.deb 5c75ca4a0f35ee9f50dfeede3cdfb055 404144 libs optional libgnutls-openssl27_3.7.9-2+deb12u6_mips64el.deb 66c3caea5bb45d9f341099090e7bbf03 1360548 libdevel optional libgnutls28-dev_3.7.9-2+deb12u6_mips64el.deb 56f3c4f392b787261fdca9485161bd45 2061472 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u6_mips64el.deb 568261260f056162eb1fc82ff0906319 1232008 libs optional libgnutls30_3.7.9-2+deb12u6_mips64el.deb c0d299a0853b49833e28720370c859b9 49100 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_mips64el.deb 0cfc8cbc52998adc03ef33d70d530dc3 13112 libs optional libgnutlsxx30_3.7.9-2+deb12u6_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEesE3YcWKZXIkRPMemf85J+x5/aoFAmmSCegACgkQmf85J+x5 /aqQWA/9FPpn+iiFghXwgGBqMuMCAHD9s7ix6S5i0N+hrmkoSkJkafBUCwMSzikj YvkA5Hao2xKOONOjhafdxVBSm7Q++oWLoVRFrPZdfEhrqBXjw1BruQ69Yv0aZfMQ k1kV2C0eSQnDlZ1mB/jKGAO4Srv/33EGIfrznv1bTUmBLEHwiO/B3bN0mqTGdHgX yZbaBR7urLQKN4I8DtwwvYdxgWb828o0mLJ/WhL3HzkUBnwOHXoybPiazNGMoLUC lSi/Ad4S97wRewYiiA3lk7GEcXPwNRsTXRJpyj6XsuWzMlArfK5lp+ajMM8bvhRf XKA4MLCqfZpPL3KuN8rZUTai+S9XQmGdlaFRIv471YZhELeFx7XWnZt+ZM7EYi6P uIFJsPeg7/5R2YUQlljKRBrnpWQBe2sieTi6FylfZM5WtAhujL3LEIxbWo6dXRWG fYnsasSmGuRDYCq4rGPF2QcWkQlYvmAh7MbKz0epWOLJRr/asKz0YWr6MRZewvGn M/RWO9MKrE+ImomRTfmETcSdE+3jOkeq1YjYQxYhfj5QB60Xh0IyZD8vGzsgw2kP 7WU/xddmhoRDzzScOOhTUTL1pToDf06A+wJFfEmFWzUIeO5JM6SgJOp9mz13fAzx gpp8GY4llK5zndq2T2L6e9ceKwhhZ6ajywXCyKzVGrg0sLQbohA= =tfpy -----END PGP SIGNATURE-----