-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Feb 2026 07:53:42 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym libgnutls-dane0t64 libgnutls-dane0t64-dbgsym libgnutls-openssl27t64 libgnutls-openssl27t64-dbgsym libgnutls28-dev libgnutls30t64 libgnutls30t64-dbgsym Architecture: arm64 Version: 3.8.9-3+deb13u2 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities libgnutls-dane0t64 - GNU TLS library - DANE security support libgnutls-openssl27t64 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30t64 - GNU TLS library - main runtime library Changes: gnutls28 (3.8.9-3+deb13u2) trixie-security; urgency=high . * libgnutls: Fix name constraint processing performance issue Verifying certificates with pathological amounts of name constraints could lead to a denial of service attack via resource exhaustion. Reworked processing algorithms exhibit better performance characteristics. Reported by Tim Scheckenbach. [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831] Checksums-Sha1: a656076ff3b992acfa44f1f89ecaff2d67f4f967 1017676 gnutls-bin-dbgsym_3.8.9-3+deb13u2_arm64.deb 8f7bb5ba819cf6677af50412fbc73b8c1d225def 674056 gnutls-bin_3.8.9-3+deb13u2_arm64.deb 35d5b733661a00bb345796a12a16590f93655d14 9724 gnutls28_3.8.9-3+deb13u2_arm64-buildd.buildinfo 41ebd0bd28872af19e4a137fdd55dc0a86983036 102072 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_arm64.deb a8372d145319197bd5cff381c3125c553ecfdddd 452832 libgnutls-dane0t64_3.8.9-3+deb13u2_arm64.deb 81c710b60b847d81580db43fffa77cb50bd05a05 102936 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_arm64.deb f4a42b27fea71d1cbb5bb585f0414918b536a245 452796 libgnutls-openssl27t64_3.8.9-3+deb13u2_arm64.deb 881c073a44f97d69c22ca9c0f560e56827c8fcde 1420324 libgnutls28-dev_3.8.9-3+deb13u2_arm64.deb efd1981e330debd488d4a96bfcbaa07b18b8ea35 2149700 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_arm64.deb b45f13bf71033bdacbc706433adfe20067f274e8 1378220 libgnutls30t64_3.8.9-3+deb13u2_arm64.deb Checksums-Sha256: c93e7abd274fb24f74c63e8cf415aae395636e887dbbe3878c2c8808c58e6112 1017676 gnutls-bin-dbgsym_3.8.9-3+deb13u2_arm64.deb 2b79238d633701a39de57686b008b4a9c64946e83c096e72998894380c8dadec 674056 gnutls-bin_3.8.9-3+deb13u2_arm64.deb 40776068c648a35983fb136dada0cc77958269f01a64d6a37cc9111a8d51c648 9724 gnutls28_3.8.9-3+deb13u2_arm64-buildd.buildinfo 7268e54a0a9cfc815eb64149a35a30f6cda4f35b151617fb97bf29b92a852e19 102072 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_arm64.deb 1d436ce2c2d0f9f52007a6e85367de3b396322b1d360048b97e4efbbdf49091a 452832 libgnutls-dane0t64_3.8.9-3+deb13u2_arm64.deb 8024b530c8b28f95b3ec86e7395c7af71e9a1b3757c29fff276bcff00134d284 102936 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_arm64.deb 254d0d9bcc6014bfae6a28636f6eea5cf1f012ec9069e903cd73b64ef4059f66 452796 libgnutls-openssl27t64_3.8.9-3+deb13u2_arm64.deb 92afbd64336023a1bb71e23932ff123e15c369d07f51e9c4949d616ba6093967 1420324 libgnutls28-dev_3.8.9-3+deb13u2_arm64.deb 4285952d975829855a75165df1b8e82a565ef820586ef3a55261c7e38f89630d 2149700 libgnutls30t64-dbgsym_3.8.9-3+deb13u2_arm64.deb d7798a2d36cffce9e914fe94b31a18f0346da8ea2f962a8d0fe830dc4d2418df 1378220 libgnutls30t64_3.8.9-3+deb13u2_arm64.deb Files: 043345f414f7c2f9cf1af831e11952de 1017676 debug optional gnutls-bin-dbgsym_3.8.9-3+deb13u2_arm64.deb ef21a98a8ccf8ddb808a0d989018e46a 674056 net optional gnutls-bin_3.8.9-3+deb13u2_arm64.deb 954e9e608469a67b25cbf1e8f0667120 9724 libs optional gnutls28_3.8.9-3+deb13u2_arm64-buildd.buildinfo 1474b2c281474fc96c6b2af4ec9995ed 102072 debug optional libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u2_arm64.deb ffb86e630199495f6032d660cc7a04d9 452832 libs optional libgnutls-dane0t64_3.8.9-3+deb13u2_arm64.deb ed7bac1253691886f4f3313c344ce17c 102936 debug optional libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u2_arm64.deb 0d28d86bb3d719a413708da737c699f1 452796 libs optional libgnutls-openssl27t64_3.8.9-3+deb13u2_arm64.deb 820f6108a851b6b38a3a2db5e25e5886 1420324 libdevel optional libgnutls28-dev_3.8.9-3+deb13u2_arm64.deb ba4d567ea7d0d2dcbb4eff306dcba7ec 2149700 debug optional libgnutls30t64-dbgsym_3.8.9-3+deb13u2_arm64.deb f54794b2766646dc5e0d43a622c36c97 1378220 libs optional libgnutls30t64_3.8.9-3+deb13u2_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmmSBmsACgkQScpU3dYu lLgTUQ//ZJbD7eOwyyPer9Y6O7XWoBIct0/MCGOg56BJN1NoVsJXQ3lgELOCPKOX 4JmekO/Q6gp5EQWz/jirqpS9SWzeCG4/FBnm1yKoqPBjoVE609hKyX4f2+8BPhqA AfQ8Pmd59tVejvkKADJ017/K2o8fhjy91M0EHmBIaTuFkuy70OV2pCmRe1MSAbcC 9egsAv/R3dJRxbs62gV00F2xVYHNvGTPy29XoqdcTUkVwPtbBlcYQHDTFmbr8q99 Jv6AiQV9sNyw8ejeNAG3f1Wb2NLVTiEIfB4JAvx/tfKmSp2lhEmz2QhIK3dsUPd/ 24CllQ5N/6c/LK67zKdc9zgPiJLKjukGAEGq7ZAycwbviEAOXDfpiZ2R6H51LNeU 230971YNcjh0YOERvH8jA0YuHkjGcTt4/pBQkFZuzLXvDGlPtNdM8L9A+VpSVb/z tTpgbZDsUOimJmYQNfTqgf2GBqV7/RaUUkFGURBPttVOuAPonqssCEhh3H6NDnz2 b9LLw3E1CHWGrO0LWcg6bXv4Srfd8KkORay4G0If7jPonO8551ou8yU7lAlwxYHu mZuK1amgr158jt970SOa/iT4DssdQj+ekW3FSDdJYt/k7+k3EDTWElW14xj2JCbM eZMb4mFh0F+NNFe8z8NJysumlI7hYAx+H14gjk02/UQZypwV4O4= =wVi5 -----END PGP SIGNATURE-----