-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Feb 2026 15:49:14 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym Architecture: ppc64el Version: 3.7.9-2+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx30 - GNU TLS library - C++ runtime library Closes: 1121146 Changes: gnutls28 (3.7.9-2+deb12u6) bookworm-security; urgency=high . * Add patch for CVE-2025-9820 / GNUTLS-SA-2025-11-18 from 3.8.11. Closes: #1121146 * libgnutls: Fix name constraint processing performance issue Verifying certificates with pathological amounts of name constraints could lead to a denial of service attack via resource exhaustion. Reworked processing algorithms exhibit better performance characteristics. Reported by Tim Scheckenbach. [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831] Checksums-Sha1: 68bac6cc884bb03daee2bf60f17fc9d48d1fb264 857368 gnutls-bin-dbgsym_3.7.9-2+deb12u6_ppc64el.deb fd3b80a595b9cd0ff5d8195720640d0e37775942 640984 gnutls-bin_3.7.9-2+deb12u6_ppc64el.deb 62f12b9b07156e1967e1c1ab3339b6d6d42e3acc 11518 gnutls28_3.7.9-2+deb12u6_ppc64el-buildd.buildinfo 9f5b2b17d30a77beba57d5509dfab3ed51d90549 268068 guile-gnutls-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 8421884c4186076fbc2f30977154e354fa9e65cf 463744 guile-gnutls_3.7.9-2+deb12u6_ppc64el.deb 7eb6cfb65099ff5a6b10ed2c3223371baf844f04 94744 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_ppc64el.deb b106a5d0abea2df5ed03a554c2514a6112f0f699 409736 libgnutls-dane0_3.7.9-2+deb12u6_ppc64el.deb 607fadbae8d36d72b1dfea193add77ffdcdc590c 95788 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 690fd9ee2455869d7fb1d8d85906b24101da0c0c 409488 libgnutls-openssl27_3.7.9-2+deb12u6_ppc64el.deb 83dbc0dc47574a5e6c00eb2309e8641ee7fd11c3 1416388 libgnutls28-dev_3.7.9-2+deb12u6_ppc64el.deb 1ade5dd0e057d49abb9577a62f0401ca86a1d847 2067324 libgnutls30-dbgsym_3.7.9-2+deb12u6_ppc64el.deb fba4877ed63d24500c10415d7fc7e47ddbe7bccd 1373972 libgnutls30_3.7.9-2+deb12u6_ppc64el.deb 3633688ac9615d5a2fe49518de69bb869457e937 49936 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_ppc64el.deb d42fd319d61824f45a6748db7c4b3a186d8a4a2a 14536 libgnutlsxx30_3.7.9-2+deb12u6_ppc64el.deb Checksums-Sha256: 09db8d8f9c4d728585601a04a4b15b3ee09dbf828ae554d92c672449e006af07 857368 gnutls-bin-dbgsym_3.7.9-2+deb12u6_ppc64el.deb b4dbaa3a73fede67bba78649f3bc3fb4626344df1f21d2cdf47aa9f9a1e13331 640984 gnutls-bin_3.7.9-2+deb12u6_ppc64el.deb a07b143ebd4b801ba97f4590d65b676152915a364c185667436d79502bcc83ce 11518 gnutls28_3.7.9-2+deb12u6_ppc64el-buildd.buildinfo 3a034c6c64c805f3fdb937aa57ca2a65148eb95c533152158d55901d570bab21 268068 guile-gnutls-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 60c40070ef2a4fae3f0e431263b37cc35e5772da0f1e62423000b541809c9814 463744 guile-gnutls_3.7.9-2+deb12u6_ppc64el.deb 82a7c4dbfbf5769da49b2197995c13090a90c29c5859f0aca9c82b6db5b5bdb0 94744 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_ppc64el.deb eae1ebfd4d9aa25448237f47dbaba790400d161580d3c98474b40d52ef3e5901 409736 libgnutls-dane0_3.7.9-2+deb12u6_ppc64el.deb 6f414013cbcd69bd34ae1824397b481fc6a018e52a97688deb15390c3a112615 95788 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 6d1431db181adc6ede856502a8b017c7e02960ed26cf591ef726b528e46a5d08 409488 libgnutls-openssl27_3.7.9-2+deb12u6_ppc64el.deb da12f65fe667dae98237f522740abe1ba3fc0fcc4935507e2c1817c5903a0b19 1416388 libgnutls28-dev_3.7.9-2+deb12u6_ppc64el.deb 892ac54246d35279e94ecac4ace0ab7aa8a4687e27155d366d6b10acc478771f 2067324 libgnutls30-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 5e53356a3af459ff2e2f543df138817644457228106bb68b3984278bde4fb388 1373972 libgnutls30_3.7.9-2+deb12u6_ppc64el.deb 12ad0e4b8ae8a1c35b40ed6166d464f45e42889d6bd4d2fff4b12a15313e52f1 49936 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 9bf03c96e81547a57a13880453348749ce2799f6b5e7e78c82aebf3e53c0bd3f 14536 libgnutlsxx30_3.7.9-2+deb12u6_ppc64el.deb Files: a52a54de0e54e29c21f99365b43b6421 857368 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 38ee8275796ee1cbcb98c89f82ffc96d 640984 net optional gnutls-bin_3.7.9-2+deb12u6_ppc64el.deb 58f4d6d13f1c8319260af4ae4ba9661b 11518 libs optional gnutls28_3.7.9-2+deb12u6_ppc64el-buildd.buildinfo 7f154e88df517319c9db11aa3b580f49 268068 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u6_ppc64el.deb ff769d580d6a7699fe53670d769573cb 463744 lisp optional guile-gnutls_3.7.9-2+deb12u6_ppc64el.deb 3eb8361e28768e677ab6f516ea1bf0a8 94744 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_ppc64el.deb a24fc15344675a5942c6e351790245c6 409736 libs optional libgnutls-dane0_3.7.9-2+deb12u6_ppc64el.deb cbd38250c3fd319b4c032d35662ef441 95788 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 6bad7b41f7f54f787cd02365756d52ac 409488 libs optional libgnutls-openssl27_3.7.9-2+deb12u6_ppc64el.deb f27799a75707df0dcafb5a1246052e9d 1416388 libdevel optional libgnutls28-dev_3.7.9-2+deb12u6_ppc64el.deb e628e71807755f170c3cf00d538bda95 2067324 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 03c27a46b78357303829569bd44d8236 1373972 libs optional libgnutls30_3.7.9-2+deb12u6_ppc64el.deb 90e931df434a9edbc7ab9af291c4b609 49936 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_ppc64el.deb 622666eb0d3f9168fb3c06796325cdbf 14536 libs optional libgnutlsxx30_3.7.9-2+deb12u6_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDoRc43uRWMOoIqIgDNLUPhbmg7MFAmmSBucACgkQDNLUPhbm g7O4Pg/8DD0UyjSONsNohnvR2QYOtJWSv5HXu+Tq0vjCA/SWzgW5I/42xr2DZ0zI ZgP+uYvK3F/73d1/f2ZioMtoY+L3Ka0E/uoXRN8sbzCwq4H3ih6qdHhlOEmGtS2K nQziV8EVEm9Rgbjd0Ez69BPC1lCKhFXGkw19ARtqhWPuSlXWDDC+MIJdHcKTMVgf ohVJfBISfn1I5zh0zHp4H5x5bScOcENJvtJhn+p/QhV3QnUdepG5aZ/kOUR394fG DnYriAEvzmhnCQK9opmJj6hH+KcBCIdXMW5eUiOIM1crCICVVRm8pfFC+RxfE1qF nN+BFh8qX9ODj/BJ0G3tvGJi3zdasmOUQ5h4A0qvLJtgyYCwZMusU/SrOGkAeyEh wNC6dwo9A6jljNX5K1IlynU+qZ2aS41t2qiBwujIbA3tAYmA0F/hC72ghnJYBacA PbIDN/0fXkaQbW9EtWw/VeW6usD2gSa/KgcIu6RtxQ0CUrTKQkZJaU13+wuDEzHF 4bRgunxQhOKEeyUalbGnXNv93wjAAY05sa2nmoJ7Sh+6LINLat3J4UtwrdBiFogJ qKKqjTcfc5eQ6e5DZ1NIY13CtTc9+JAg9fUsK1MroPI4mzYaE9qsnHAKI0Ru/aDY ievxU8mnYf1aWTJAMlqhcNlW9zxQf9cAG3RS/TVz6iPfpaiAmd8= =l5Ib -----END PGP SIGNATURE-----