-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Feb 2026 07:53:42 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym libgnutls-dane0t64 libgnutls-dane0t64-dbgsym libgnutls-openssl27t64 libgnutls-openssl27t64-dbgsym libgnutls28-dev libgnutls30t64 libgnutls30t64-dbgsym Architecture: armhf Version: 3.8.9-3+deb13u2 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities libgnutls-dane0t64 - GNU TLS library - DANE security support libgnutls-openssl27t64 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30t64 - GNU TLS library - main runtime library Changes: gnutls28 (3.8.9-3+deb13u2) trixie-security; urgency=high . * libgnutls: Fix name constraint processing performance issue Verifying certificates with pathological amounts of name constraints could lead to a denial of service attack via resource exhaustion. Reworked processing algorithms exhibit better performance characteristics. Reported by Tim Scheckenbach. [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831] Checksums-Sha1: 66ab9fc5036782eb84da6058aa3ce1a4eae04030 951120 gnutls-bin-dbgsym_3.8.9-3+deb13u2_armhf.deb 78ff6f4132c92b79ed6068ccfbf2c993452edb1e 664228 gnutls-bin_3.8.9-3+deb13u2_armhf.deb 57bf902ed1587c3b708e704f1bd316b586ad1d48 9594 gnutls28_3.8.9-3+deb13u2_armhf-buildd.buildinfo 041c20d1c6f0f40a42c051c67994f8dc3be307f8 94740 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_armhf.deb 844071ff11b255f2cf6283163b16afafe10a7803 446328 libgnutls-dane0t64_3.8.9-3+deb13u2_armhf.deb ccd4ef123ae45300aaa3a52c53af6506ffc66e22 96456 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_armhf.deb 0205652baea3b5ffe999a5319f4b48cb3401c1ca 446152 libgnutls-openssl27t64_3.8.9-3+deb13u2_armhf.deb 0ae6ab4c8597beb72b29c70d67cff64d8eb87ad9 1341140 libgnutls28-dev_3.8.9-3+deb13u2_armhf.deb 3ff069b06eb95310dec4ffda8442299f2bef6717 2093276 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_armhf.deb 904b11a2fa9c4a0cdfdd4900fd54b90d606346d1 1386012 libgnutls30t64_3.8.9-3+deb13u2_armhf.deb Checksums-Sha256: 3eb844ae3d05a14bbb55147c8f3ec76707c009b9270184f79f7db1c60d30ddb1 951120 gnutls-bin-dbgsym_3.8.9-3+deb13u2_armhf.deb 8f46ecebd5834197520021be7b7e1b677b4c83317a2c8b8a5ccb1ed781f5794d 664228 gnutls-bin_3.8.9-3+deb13u2_armhf.deb aace443b255b614bce753f7f2f34e292442bb76637b6803b264f9e0f4d5a3f0d 9594 gnutls28_3.8.9-3+deb13u2_armhf-buildd.buildinfo e8d74408382775728ba6f6e5ec4c56a72f5592ad6ba4762258e2cc5442ed27c0 94740 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_armhf.deb 11ba905ff7d3c141ca54773c0973d38ef9ef0e3e57d84820414a191512900bed 446328 libgnutls-dane0t64_3.8.9-3+deb13u2_armhf.deb a97c76f31447589f8e476b9344c873f3e4ea7c2395fb19ec0c55e22376742811 96456 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_armhf.deb 5b3caafdd28cd53bdb5341cbf065407239e21ab6b6d5249e25004a9664094827 446152 libgnutls-openssl27t64_3.8.9-3+deb13u2_armhf.deb ee10341cb275cab790168e66e9d436983401d12c11b295e1c3be0aa45635aaf5 1341140 libgnutls28-dev_3.8.9-3+deb13u2_armhf.deb b3a03462578f240eb639b188e6567c46c8b7880099ca3832fed8c07c6ae8684c 2093276 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_armhf.deb 4117d185f28d3926777388f98902a5e87535fb0f67ca25ac404529a4f5e36593 1386012 libgnutls30t64_3.8.9-3+deb13u2_armhf.deb Files: c746253df8f14f1a7d17cb9a1ac242c6 951120 debug optional gnutls-bin-dbgsym_3.8.9-3+deb13u2_armhf.deb 7cca08551c6eb5c424017c353f6df444 664228 net optional gnutls-bin_3.8.9-3+deb13u2_armhf.deb f8ae01ab742adf3128387295d46ef297 9594 libs optional gnutls28_3.8.9-3+deb13u2_armhf-buildd.buildinfo 110f24b6176b04afa71a5b087549e9e6 94740 debug optional libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_armhf.deb cafdce14dd7a8babd6283abfc786f63d 446328 libs optional libgnutls-dane0t64_3.8.9-3+deb13u2_armhf.deb 4e81a3ee65c2a37a64dd18bf26c60460 96456 debug optional libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_armhf.deb 1202735d1e1b36e0aa8eed986c650395 446152 libs optional libgnutls-openssl27t64_3.8.9-3+deb13u2_armhf.deb c41f88a1bbe647bcbdf016f8fe64d139 1341140 libdevel optional libgnutls28-dev_3.8.9-3+deb13u2_armhf.deb f3f2574f97dfe72875ca783aa5f285fd 2093276 debug optional libgnutls30t64-dbgsym_3.8.9-3+deb13u2_armhf.deb 1e8b3b5c5620cc3015edfc254cdd128f 1386012 libs optional libgnutls30t64_3.8.9-3+deb13u2_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEiIG3Q3DxwDgRKKeyLRECdjCZQkcFAmmSBz0ACgkQLRECdjCZ QkerAQ/5AXRFvWAg9+cfg0cnK8u477OFJ+cUOHM+Fw7vcEmOXFBl0GGKshjyFQcH boxzpD4bhusjFLQRGsY70FD2jMFc7zHtS4s6OtK/Xmtbme72YWqLb20xKC1KJJbD ZzGpuzdFP11a+e5seAN17iTwLjd1C95qzJHzKqhm9GGyC+7LImZ+/cK7IWL03ofj PB+Z3KZu1M6WhiCOA7j6EU600gJEZ+Cllec+rEYNUYYCJx3RinkdmunMEwLIhWt+ g7vdCTf7scMXKYszctQC/ZqTvkeeKpEibF7BvBD3COthqc8frkMBbFnjhXT47bKz 2ROQvRY1q/zREfH/RgZX/wkddNrGeJkaBIySINK6woDVs66BF0rMaGdGNJ3t2ZzC CI77nosowQYpITgFRitTyLD9wkuiVKLPy6ZJmlKkTq4P+Psuk/4gVoxXPWc4CB7N mZD+XQnDAJp6ZEo2SIwiiAwE2JE0ZxzdvnmUjZzrWVpkvyc665xkp1BjZ6CTZMgs yX2GoVVGwXhep7a26JiwH8zykYRN/sKF/KfRFH0o2fciEeItiADx3RbaANAWQULU 70Ej6ZSTJU58kof/bTZl8i0mgRI3gf9AApclE7MoIrZbnkdUUZwVZ4vslvLur9Ut 7tCPuPV66b7F1k0tQhabcdByV5C2ZeJkFbfSEYUpZozrTyfECPw= =+Yfe -----END PGP SIGNATURE-----