-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Feb 2026 07:53:42 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym libgnutls-dane0t64 libgnutls-dane0t64-dbgsym libgnutls-openssl27t64 libgnutls-openssl27t64-dbgsym libgnutls28-dev libgnutls30t64 libgnutls30t64-dbgsym Architecture: amd64 Version: 3.8.9-3+deb13u2 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities libgnutls-dane0t64 - GNU TLS library - DANE security support libgnutls-openssl27t64 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30t64 - GNU TLS library - main runtime library Changes: gnutls28 (3.8.9-3+deb13u2) trixie-security; urgency=high . * libgnutls: Fix name constraint processing performance issue Verifying certificates with pathological amounts of name constraints could lead to a denial of service attack via resource exhaustion. Reworked processing algorithms exhibit better performance characteristics. Reported by Tim Scheckenbach. [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831] Checksums-Sha1: 4f776a48d2f0b4d5cffe3a54a92c208fecc7e651 1021144 gnutls-bin-dbgsym_3.8.9-3+deb13u2_amd64.deb 9bfada7bdf75d9c7aeaefba4e985a238cdc9c01c 692316 gnutls-bin_3.8.9-3+deb13u2_amd64.deb 82e1cbe4e12a25742d76307e44c7623977a83a7b 9737 gnutls28_3.8.9-3+deb13u2_amd64-buildd.buildinfo 8583de80c6e38ffb0cdc0f5919a6b00053accb34 103732 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_amd64.deb 5fe2591c2a8d2b35c3113f6e90f7d86467f792a5 455480 libgnutls-dane0t64_3.8.9-3+deb13u2_amd64.deb f2a6320aa4694d1e2e5f43c21eff6c351e14f9a6 104336 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_amd64.deb 38ec6c71deb7632b2d07487b512f0b36e04986bc 455348 libgnutls-openssl27t64_3.8.9-3+deb13u2_amd64.deb 7b65abb213879a3150cabc4d4e8dd49d2ee897dc 1408532 libgnutls28-dev_3.8.9-3+deb13u2_amd64.deb dfa50ca4f2116f60970204a6109ed545da837cec 2166472 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_amd64.deb 7605e19d140e3fad2be4fe3c9c8040424cf1d5ab 1468264 libgnutls30t64_3.8.9-3+deb13u2_amd64.deb Checksums-Sha256: bc40048873141ec658c42388b2860b5e4fe39e8ef6f58fe55de29142cdb3120e 1021144 gnutls-bin-dbgsym_3.8.9-3+deb13u2_amd64.deb 731889028be3b737f7b8c0db410c016a312e17330796666126e4155bf3ade8f2 692316 gnutls-bin_3.8.9-3+deb13u2_amd64.deb 851c471032b92c6330f6113dd8d1d8a9ad5e995b3ae6cbdb3d12ea9e9ad5dbbd 9737 gnutls28_3.8.9-3+deb13u2_amd64-buildd.buildinfo b5dba6fd2eb10238eb4691e5c4056a6fa78e41a3a4053fc9275ca9881ae143d4 103732 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_amd64.deb ffb1fa44ae36aae6c546bc4d7547ca401cd77cabdb3cf33a5a3dbc322ff90c2f 455480 libgnutls-dane0t64_3.8.9-3+deb13u2_amd64.deb 295f39dad4b0603e12cbb1d33ff318e5279b9d65f7765b994674c32ee1605e22 104336 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_amd64.deb 005017681c7177558a66edbc456b4b93f17bbc1ef0bf3e28a7e1751912490093 455348 libgnutls-openssl27t64_3.8.9-3+deb13u2_amd64.deb 3fae3bd089c64bbb290a18512789eb3edf23c1cc451e541aa99fb15e38b61ed5 1408532 libgnutls28-dev_3.8.9-3+deb13u2_amd64.deb c03e13cb2bb7087e6c2dd8fdf95ac91b348592c659ca24aad4e55aa66ce1f87a 2166472 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_amd64.deb 788ff0e3ec8ec6a255a61f3d8e7a8235dd0884535990bf8ca04598f7eb380964 1468264 libgnutls30t64_3.8.9-3+deb13u2_amd64.deb Files: ebb71178d00440d28c13cf92d7bef2a9 1021144 debug optional gnutls-bin-dbgsym_3.8.9-3+deb13u2_amd64.deb a6127ccfc529022538a4d6f2da872481 692316 net optional gnutls-bin_3.8.9-3+deb13u2_amd64.deb 40fb24a66ea7a993581e0db5a316e430 9737 libs optional gnutls28_3.8.9-3+deb13u2_amd64-buildd.buildinfo 44afe8bd572ff3c2dc93d5b662f5cad5 103732 debug optional libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_amd64.deb 42c9bf358fcee24608446f21d873133d 455480 libs optional libgnutls-dane0t64_3.8.9-3+deb13u2_amd64.deb bcb9dff4f7e2a482ff39beab86e56958 104336 debug optional libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_amd64.deb f61ebfa93c78a9d07851aa91093301c0 455348 libs optional libgnutls-openssl27t64_3.8.9-3+deb13u2_amd64.deb 618420750b956282fc9cf1ce5f85d993 1408532 libdevel optional libgnutls28-dev_3.8.9-3+deb13u2_amd64.deb 480efdd42ffb6b9e03e020712fd3fe8d 2166472 debug optional libgnutls30t64-dbgsym_3.8.9-3+deb13u2_amd64.deb 072f40ffba24e2779bb1ca0c34cd2464 1468264 libs optional libgnutls30t64_3.8.9-3+deb13u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEaPzFtKPtF0JrKPV5iZlfn74WV6kFAmmSBsQACgkQiZlfn74W V6lxLQ//ZUv9EnOQmCx542OUsykWRPTp/CYcp8HsDz2LQUuWX6sMTaO8ZpaMfBQU kQX8vCYWxroJpw89ELaDfT4UVqW1VMV63C0pY27Uxg9wou5VDiqPxtDesda+9jUR IhQkekNAcIr7ekek7QxURZ27qjR6OkSxxs4Fi16BI02HgDx+ujifcN1mUA/5B8uZ YjgN8u1OU1t37xZCRT+SFw3ya8L5nON9W/WVvvCoFSpCPH3Y/uTT5sJvDokhLeYd 1242Ywz2XLg+gfOrduPYAF1ONSu7IZGOkKt1dz3LXZpU9VLqk2HrnQn3Y1zOPbOw Fopn2klcubqlYrwq9797JHBGdIT1Q1qmUiLEuZm8DWXxXqpzVrL0i+J8WTrshtfL viMJOkYWS0QB85IaXq9RKQnPW54doyvdtJgqT4CFl4t7hNShzRylLF974V4BSlKi CRzlxNx8OWGecbFo5LSbYothoGix/bv+BuLYpMJ8CkJpQ2hA4OfA/QoJeoVXg20c hcunJbgdaw82NA6j+sY+oEeVQo/Iaxla0S4+evr/AEwEFlrKbgfKIKqGt/i095f7 Ft67QR0LkvLmp/0vIKbD9H6rpCjoWYGik73TVcRztDNS0T3M5DQNZZo11TFr8ELU EhIDLqWLnGk8SycNRsa1YjJcrDemU0b/GexDqSMXnTa9hZHhtO8= =kG6/ -----END PGP SIGNATURE-----