-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Feb 2026 07:53:42 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym libgnutls-dane0t64 libgnutls-dane0t64-dbgsym libgnutls-openssl27t64 libgnutls-openssl27t64-dbgsym libgnutls28-dev libgnutls30t64 libgnutls30t64-dbgsym Architecture: s390x Version: 3.8.9-3+deb13u2 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities libgnutls-dane0t64 - GNU TLS library - DANE security support libgnutls-openssl27t64 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30t64 - GNU TLS library - main runtime library Changes: gnutls28 (3.8.9-3+deb13u2) trixie-security; urgency=high . * libgnutls: Fix name constraint processing performance issue Verifying certificates with pathological amounts of name constraints could lead to a denial of service attack via resource exhaustion. Reworked processing algorithms exhibit better performance characteristics. Reported by Tim Scheckenbach. [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831] Checksums-Sha1: 27169a03d1a736e63c189656dce26d5f18253e8b 937648 gnutls-bin-dbgsym_3.8.9-3+deb13u2_s390x.deb 105df0961819964b49acb9dfe1272699e7618e06 680932 gnutls-bin_3.8.9-3+deb13u2_s390x.deb cdd292e336ccbb8b0a8a0bd77e61d297356c2a96 9596 gnutls28_3.8.9-3+deb13u2_s390x-buildd.buildinfo d94ca977543ea4a08c039e3a79db6ef30533afec 106716 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_s390x.deb 68e3f836d05fde01e0cb61e7e00052c59ebdcf35 455748 libgnutls-dane0t64_3.8.9-3+deb13u2_s390x.deb c1e1f715755eb3cc7fd3edca1b27c28bc946c06b 107688 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_s390x.deb 6f650856e34e4d27309ad4945998793a6e5610de 455592 libgnutls-openssl27t64_3.8.9-3+deb13u2_s390x.deb 4cb4bc1162799ab59f4d2293964650354dd96ad9 1320732 libgnutls28-dev_3.8.9-3+deb13u2_s390x.deb 163b50ec83fe19fe54cd4932968cb52530bec877 2057784 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_s390x.deb 183e84b20c2b4d174f73eeabc9a00e4755d9f059 1386628 libgnutls30t64_3.8.9-3+deb13u2_s390x.deb Checksums-Sha256: 0fe7daf41751b42b3b1fa3f79f9957838f49d1c9b0887970c1b674c2a502b302 937648 gnutls-bin-dbgsym_3.8.9-3+deb13u2_s390x.deb 8f43aa320da204971ed285ea7fa581f29bed3c3e974491453ef847d6f695f45f 680932 gnutls-bin_3.8.9-3+deb13u2_s390x.deb fbefa30030ff805448fd6e31953c717091be25caab0e0eb1e14e32dfdaa61171 9596 gnutls28_3.8.9-3+deb13u2_s390x-buildd.buildinfo acd04f1b5e8253fc9ef9a5078cc5d1976a122ef111f43083a9eb4fbc8fd6408b 106716 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_s390x.deb 10ab13354a9d0e4fadd3f8d1ecb948e60490ee5950b3f09f194f749f74a56a52 455748 libgnutls-dane0t64_3.8.9-3+deb13u2_s390x.deb 4add9fb4cd771c67c89735cfc749a67e8a36daa93407dc2759464741edd7b6da 107688 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_s390x.deb 813b8365fd11c72c2c75b0869b8179f633b8cfa7a466422bb35f48b626c77516 455592 libgnutls-openssl27t64_3.8.9-3+deb13u2_s390x.deb 06a3ef93f6d25085a726afc019bb3a9b592de38bd8a69ab9bee983fc57a1602d 1320732 libgnutls28-dev_3.8.9-3+deb13u2_s390x.deb b292474589642833ad5eb919f11033c0f47972f28e6ca6a15def1a8ce482f952 2057784 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_s390x.deb 3e3d1e5c5323435afb5e8f43aa79a8fde927239d115a136967b715576a4b334d 1386628 libgnutls30t64_3.8.9-3+deb13u2_s390x.deb Files: f8b9dd1e25288c4c874705407aff8c9b 937648 debug optional gnutls-bin-dbgsym_3.8.9-3+deb13u2_s390x.deb e669c111f28c32b7985b2a4e2a3d5227 680932 net optional gnutls-bin_3.8.9-3+deb13u2_s390x.deb bac5294ec1866dd5afcae200ec5b4c16 9596 libs optional gnutls28_3.8.9-3+deb13u2_s390x-buildd.buildinfo 1101e2ba96e9fac9ebcfafff015f0db0 106716 debug optional libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_s390x.deb d4b7eebfab77e974501bad419cfa60eb 455748 libs optional libgnutls-dane0t64_3.8.9-3+deb13u2_s390x.deb 2ec444e0464e8406c9bfcbe8480b8222 107688 debug optional libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_s390x.deb f0b0e0553bd34ff3cbb985249e120b4b 455592 libs optional libgnutls-openssl27t64_3.8.9-3+deb13u2_s390x.deb 94d358f0cc1e85b6b9d5f40204aaeefa 1320732 libdevel optional libgnutls28-dev_3.8.9-3+deb13u2_s390x.deb 1110baef4858a04de4f6d8372d972dd0 2057784 debug optional libgnutls30t64-dbgsym_3.8.9-3+deb13u2_s390x.deb 42153805b522913dd51162805470e1a0 1386628 libs optional libgnutls30t64_3.8.9-3+deb13u2_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmmSEhEACgkQkaCrxAR3 BY2zxg/+OuxWTA7mG2NWbKb6EJtxEDRczy4hxD1rybj+jIzfzPSa3vjbkBgRwTqm o3S8yhIDqoDjwSundmjaqsqHJhkQWaf2wN+tfswgwOt4Kx7ZJq8I3fGJ9m+atszN JsMNKQDRsYf3MaPWLPHzwZ4/ZXy/qC/F0Cz6ULQ7lewpx4rjSjh6VyNpyyxdO98c 2lPhFZQvC7ZtbIsMPeLiATi+DwyVfXS9oHCxOlqNZ/7Ezo4sPPJzbDdF+FkgKYMC ULnoTle+PIgFqllpudIZ6oJN11iqU5vhM+SVXVxBL8mFzvPkuNOui/VSojOqT38l oHoz0ZOdg6hNNQyZnG+PvFjDfloysj7xynYpKmwnXo5Icooq5iL+oyPt0mpWYDVG J2P34PmcsnuELCWwXxuGAIZVn+YhRS/bpI6G+ex9cLjRWF5Voq/Ro+KT4ItRBnMw ZuLlNXX+eROPr2O02IBA++hsXFCsB/aMzYbGb6NXrSNQkii0YT3uillGcxUOZQGI hQv7q0vnWlhwzF2p4qa3IazItjy7iGoCCU7rllM552rtY5T6AwyBs97d02x9gdhf vLzlfY6KmgTlndy2C6aPGzVTa+BVP4UmoXV2g6UI8rMtVNAKtfzTmxksW7EjFRHm be2vOoYN4sSJfti/j+Z21jT0FXjtZ/+Hm7UJIjhHJVQSBWMXwq8= =zv/T -----END PGP SIGNATURE-----