-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Feb 2025 10:07:24 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym Architecture: armel Version: 3.7.9-2+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx30 - GNU TLS library - C++ runtime library Changes: gnutls28 (3.7.9-2+deb12u4) bookworm-security; urgency=medium . * libgnutls: Fix potential DoS in handling certificates with numerous name constraints, as a follow-up of CVE-2024-12133 in libtasn1. Patch cherry-picked from 3.8.9 release. [GNUTLS-SA-2025-02-07, CVSS: medium] [CVE-2024-12243] Checksums-Sha1: 46e3db670b93a8fe9409b2234d6534929df9bfca 831048 gnutls-bin-dbgsym_3.7.9-2+deb12u4_armel.deb db3096ad1ceeac9d8aacc813cd59caef6ae5378c 608248 gnutls-bin_3.7.9-2+deb12u4_armel.deb 71e354896f2d8a0768218fef44992446d2a802ca 11140 gnutls28_3.7.9-2+deb12u4_armel-buildd.buildinfo 9ae54bdb23c993d5e16e790514bb45186db7c661 258028 guile-gnutls-dbgsym_3.7.9-2+deb12u4_armel.deb 1618b1242f900303e861c6640870ef57cf804058 455444 guile-gnutls_3.7.9-2+deb12u4_armel.deb 3bc493ef8e821f3ee2e00bb96974eb8b584b74d5 89364 libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_armel.deb 259c3db427cc903d88a4883edb8b26f2b1295dc2 401996 libgnutls-dane0_3.7.9-2+deb12u4_armel.deb 66eafee028b5a542f6fbde2012c1ae05e8aedceb 90892 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_armel.deb b298c8cdb619cdbf3747f9229041eca1e7efe607 401812 libgnutls-openssl27_3.7.9-2+deb12u4_armel.deb 4403b08488de63c2b2a0599ce6fb6af1b27e6777 1279336 libgnutls28-dev_3.7.9-2+deb12u4_armel.deb 3e5f62601f6575ba6ca5a675670e2d1b16645208 2005016 libgnutls30-dbgsym_3.7.9-2+deb12u4_armel.deb d794943348a3bd85d0ba509facfcc44a3f274971 1309392 libgnutls30_3.7.9-2+deb12u4_armel.deb add8f21a68f5f1d75a9fea763c8687fff20c7eba 49072 libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_armel.deb 827cccbacbd716cf0cda15a4f48234804e5be39c 12000 libgnutlsxx30_3.7.9-2+deb12u4_armel.deb Checksums-Sha256: dda061b7266464833315e0003bf957d202ca89e372a39b19e83bd55d2dd628d0 831048 gnutls-bin-dbgsym_3.7.9-2+deb12u4_armel.deb 1a219ceadac78a72a3e6e6447867628d75105c4b34aa37b021a13579f5bb391f 608248 gnutls-bin_3.7.9-2+deb12u4_armel.deb 5ab97f5c4c9c73ba4924940929056413a9698bde18d5f362abf435e36f2955e7 11140 gnutls28_3.7.9-2+deb12u4_armel-buildd.buildinfo 157d6d62425f0c3f106046d4f6a36b4ebc1076d1d53eb89aec2e44a08161eea4 258028 guile-gnutls-dbgsym_3.7.9-2+deb12u4_armel.deb d5bff9720e89851ffb965411f39c5ebffc9e2cdb975c640951bcf3c8702d0ee4 455444 guile-gnutls_3.7.9-2+deb12u4_armel.deb 40e8c4b59028039ddc0bcfecd3a7ea9002a5c7537e6ee0d2a677fd0588349f59 89364 libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_armel.deb 01097a073f4303ebe77bb7ee6936fe769e064e01422b3a5209166ba78608e83d 401996 libgnutls-dane0_3.7.9-2+deb12u4_armel.deb 1d63d9f838f40466be1721bf6618c14cf5902cca3e1045bdc53aec0ab7e564ba 90892 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_armel.deb 053ffb620ab685a5ee2f04abd2fd07df0d59d73744e1d8b43ccb3b1a37930f68 401812 libgnutls-openssl27_3.7.9-2+deb12u4_armel.deb 72c61ee0ab054b5568fbb59277b7a122b08cbdc0edfed595218730f60ffbb38c 1279336 libgnutls28-dev_3.7.9-2+deb12u4_armel.deb 68b89ffa258a2be35a96c3b77cc10fb06006e1d6c5e8b71843dcedc881109e14 2005016 libgnutls30-dbgsym_3.7.9-2+deb12u4_armel.deb 1040ee05e6f6fd0033311de50479212942c59a18f304df911568e37789d06245 1309392 libgnutls30_3.7.9-2+deb12u4_armel.deb 342d8f2e4a95871a2c854f8073390e0c2e0a5819efc9aa0915ec95b7f5421405 49072 libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_armel.deb 83c9cf0884e390c7a091be8433a883989ed329e5b9d3d9111979bbe68b3768f5 12000 libgnutlsxx30_3.7.9-2+deb12u4_armel.deb Files: bb568a1c8c12a011a1c2eb43e44844d4 831048 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u4_armel.deb 09a027ceab0afacd5a40b62f448b707d 608248 net optional gnutls-bin_3.7.9-2+deb12u4_armel.deb c7dc2f1eba3203590a49b2979e3c4efb 11140 libs optional gnutls28_3.7.9-2+deb12u4_armel-buildd.buildinfo 9d7f8b075e71bb2b84eddd3bad54d7f4 258028 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u4_armel.deb 4b48b9ed5cdeb3a665d5753d1a6e3ae9 455444 lisp optional guile-gnutls_3.7.9-2+deb12u4_armel.deb ea64f3d3285dea9431dedc20f23c43d9 89364 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_armel.deb 41d325bd3cb3bb3bf141df2d6dc9e1ba 401996 libs optional libgnutls-dane0_3.7.9-2+deb12u4_armel.deb b0ac0c10036c8a43e6857e9e43838474 90892 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_armel.deb 1bd97de843b022a67a48e3626e227ece 401812 libs optional libgnutls-openssl27_3.7.9-2+deb12u4_armel.deb 709dabc8748b64eed31d53664dbb4e17 1279336 libdevel optional libgnutls28-dev_3.7.9-2+deb12u4_armel.deb 8b188107b38dbd3d60ccbfa849e2225c 2005016 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u4_armel.deb 82aed99ef30fa717575767efe5ba99f1 1309392 libs optional libgnutls30_3.7.9-2+deb12u4_armel.deb 23d0ef6b7bd9e349896bf03b38ba4623 49072 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_armel.deb 120cdcf10d847b9f791b979415df69b1 12000 libs optional libgnutlsxx30_3.7.9-2+deb12u4_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0+FegZ3qs8CHnZkx+XaKpT5fkBIFAmetCLIACgkQ+XaKpT5f kBLAxhAAs7mis18LjpekCcEz+yJUj2bC4gQWflVdkfp4tXPJnDbVKsJC9eKfO3KM 7Brgtq3+ItNDWt1IT9VxsUiJ7HTzcZwZAQ4kDEIRlpMaKAW1ImDhxHwiiOoU/NX7 AD3+VzbKEb0oFc9LpQUGsurCBPPbDyfiBAG8LEC+/JWm66kSrTFehEKrKKJDtswL sAL3dfkZAy9i1Y12hBvAx2OaY6IlDKSNP3KIUqm3pGrfRWfK+f0+o5huzMv5qCQD cWj+7XWzVuF4KUCihw3cDEu82zM9fLtHQLqNpzcAOjlJoA2d1XMUlchf4saAghTQ 0AcG9N5g6U8E+BQA5MjARl0kl/v9UXv2HgRidZ82Ckqdo34RdDjLBWVqoS9fKoFb aXOCih5xpNqXvIsCRjptjoZ/zuVxH0ZJDk3wBGigYklxUi3HySWcoIcc7t7s1MXv DjVrIREmAP/iGX6NmDNwQt2dzW6r04wbfACDKrjQR8/4whUlDO6FqNKH8WPrMYCR Fw9NZnYA+6nC5L5N6JHLNcpbErlHgmFOd7mCDLro+wXu0b/rfgPLO07RHwopy2MK s3uVMlYLAN5YFm5OzoZHcI8dfyEagAwVi2LlwAP6XaQIM6FX7xc96CrqJ4kQZIWj +ru44qjlsC773OgyDJg4eg/bbxikqNU8MGn6MC4DlNAXPwfKB9g= =5hTr -----END PGP SIGNATURE-----