-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Feb 2026 07:53:42 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym libgnutls-dane0t64 libgnutls-dane0t64-dbgsym libgnutls-openssl27t64 libgnutls-openssl27t64-dbgsym libgnutls28-dev libgnutls30t64 libgnutls30t64-dbgsym Architecture: riscv64 Version: 3.8.9-3+deb13u2 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-osuosl-04) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities libgnutls-dane0t64 - GNU TLS library - DANE security support libgnutls-openssl27t64 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30t64 - GNU TLS library - main runtime library Changes: gnutls28 (3.8.9-3+deb13u2) trixie-security; urgency=high . * libgnutls: Fix name constraint processing performance issue Verifying certificates with pathological amounts of name constraints could lead to a denial of service attack via resource exhaustion. Reworked processing algorithms exhibit better performance characteristics. Reported by Tim Scheckenbach. [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831] Checksums-Sha1: 00e2bae15d11dde23dabee43e9e32ed1d7f77749 983520 gnutls-bin-dbgsym_3.8.9-3+deb13u2_riscv64.deb c2fae8513c72533de26f8b52e0467e3a2c1c80c6 688008 gnutls-bin_3.8.9-3+deb13u2_riscv64.deb 884ee5e6a03f0c98e9b4c0a006bed5c2e255915c 9714 gnutls28_3.8.9-3+deb13u2_riscv64-buildd.buildinfo 31fa9c4e0be773244124c187d2a84f785fb87cd6 97596 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_riscv64.deb 3a536cf3ef075559773bc1ab5bce8cc9d1749313 453412 libgnutls-dane0t64_3.8.9-3+deb13u2_riscv64.deb a66c264582a607a887571f25cb1967932dc8e74a 98312 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_riscv64.deb bbef7521e27d7f55afb3e2ecf0291f879c4628bb 453252 libgnutls-openssl27t64_3.8.9-3+deb13u2_riscv64.deb 25fd85d256f26ee34561f095068b9677d00fefbf 2621260 libgnutls28-dev_3.8.9-3+deb13u2_riscv64.deb bef3cb7a73efff35309c14c2ec9c34a5b09ee985 1961348 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_riscv64.deb 6d837d46bd744d57154d9b12a6ed11393d388e03 1447176 libgnutls30t64_3.8.9-3+deb13u2_riscv64.deb Checksums-Sha256: 6afb646859161a48b1399ca5c9b3236f7255770d0d5d6e5832687c803ee07430 983520 gnutls-bin-dbgsym_3.8.9-3+deb13u2_riscv64.deb 45ff88ede8e236ce85f08fd163d1d31901c4027d05493be66a8bdded234cf65f 688008 gnutls-bin_3.8.9-3+deb13u2_riscv64.deb aa21b36e0c65160932977f82f7ad6aa15660131c701afb694c12478a772c276d 9714 gnutls28_3.8.9-3+deb13u2_riscv64-buildd.buildinfo 21ccb59b4af57067464ff7e791637f5fd294c3fafddada7675ce1d3e0cbe64e6 97596 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_riscv64.deb e04de37359ab57d570e635cab2b8c3d9a907486154a8d1e5b67b5ee444593b34 453412 libgnutls-dane0t64_3.8.9-3+deb13u2_riscv64.deb 451db42896bc8c6f8352614f08b3a4e6d5c07f209d006d7d629c04f277109604 98312 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_riscv64.deb f784c9f28c64727d08d582617a800b6bd876db4531aaed81a85580ca7885d87f 453252 libgnutls-openssl27t64_3.8.9-3+deb13u2_riscv64.deb 90e7552c0e6e010a5fde5bf3e555fd29a938ce4d93909e5831aa558b152b278e 2621260 libgnutls28-dev_3.8.9-3+deb13u2_riscv64.deb 0c5fb09b1ebe189ced6f9276d215436d2539dd4722b07f617e4018e176b384ad 1961348 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_riscv64.deb 8a8c7275e289ee898620490bc2dd0e40fb693b7140828a82cf4789cc094c2253 1447176 libgnutls30t64_3.8.9-3+deb13u2_riscv64.deb Files: 74faba147ce00013eba29dab2eae9cdc 983520 debug optional gnutls-bin-dbgsym_3.8.9-3+deb13u2_riscv64.deb 8c74d9a5448304ba816fae5e6b21bb5b 688008 net optional gnutls-bin_3.8.9-3+deb13u2_riscv64.deb 50803abddff945604d226031b14cf23a 9714 libs optional gnutls28_3.8.9-3+deb13u2_riscv64-buildd.buildinfo 72c952e77d8ba10038c3d9d4f9194b64 97596 debug optional libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_riscv64.deb 17e615ee9cd6dafe40a748033fbcff3d 453412 libs optional libgnutls-dane0t64_3.8.9-3+deb13u2_riscv64.deb d1d0b21ba5cc3c00701beef851d05757 98312 debug optional libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_riscv64.deb 01fe832dd3da962a5c4dd7d41685d710 453252 libs optional libgnutls-openssl27t64_3.8.9-3+deb13u2_riscv64.deb 92047cc7d1f65bf37f9c28c184788cd4 2621260 libdevel optional libgnutls28-dev_3.8.9-3+deb13u2_riscv64.deb 38c38083545652a50773458dacc95ca8 1961348 debug optional libgnutls30t64-dbgsym_3.8.9-3+deb13u2_riscv64.deb 1fd8d01d067a6a97e1dc29d4bdbbb920 1447176 libs optional libgnutls30t64_3.8.9-3+deb13u2_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgLDDByWcR07HDSHyNVgvumj7+mMFAmmSGB4ACgkQNVgvumj7 +mMwphAAyKrPelQyTrJtR2frxLh3vR/LXwsoJRG/IaXvxau5a7LW1fedUgXaP1nU BaA9DX+2SqYDfPhRy/WJ9k+5xht9FL0L8maF5jOWIofcKbck8mS79fxUop97SzYG TYxJBqXnPZy1kE39u4ShzWpUEWqlDv9FWZafX0URWd8phuR/Cj4Lxte3yJcizrRp 1ChWhKPysOLjSR1VslQcHZHq43YfGvy4zpnnIT9pm4KfqzdtoVMhWEpjJgn5qNaX SgHNpd54dza1oS8pTqWq6bBGNikgB5VidtBQD1pjoFK262QVumEpeyiog8gw+DgU 4YDug/olseQ0aa6S5mS1clzMtZ9EQFtOFgDVE1SDzoK5MHCbSzTdJTVylFZQWMNF K/6pDqekE97t25hjgj4ZImtacW+WCQuKcJvCOYI3xoFKO1+46+ssqUhP0bN7tmFb OoyB8GJgImwpN6eCsuv3RKAj1TgvJz/SNYeorLng6IVST/A+OsQlDGPCs5aZWQKC 83SCStAI9iR/jTgJusklVRGmZ/84imXHLFrMLjHSXGPiO8c4Wonx3zvuws4k/HCJ fubhRlBG1ySACOza2ITzgpYH+Iv9rhGfuguR0CbSTRsgZkXIkVvbiCkppCIfeUwB 3AXeruwNBaGviiz5fuSjnqSDs5XxC71SRavb0F6C5kDBPjTu6X8= =jkMa -----END PGP SIGNATURE-----