-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Feb 2025 10:07:24 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym Architecture: mips64el Version: 3.7.9-2+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx30 - GNU TLS library - C++ runtime library Changes: gnutls28 (3.7.9-2+deb12u4) bookworm-security; urgency=medium . * libgnutls: Fix potential DoS in handling certificates with numerous name constraints, as a follow-up of CVE-2024-12133 in libtasn1. Patch cherry-picked from 3.8.9 release. [GNUTLS-SA-2025-02-07, CVSS: medium] [CVE-2024-12243] Checksums-Sha1: 1f0d58f6af76061dea8847a369b2152fa22c16e7 872488 gnutls-bin-dbgsym_3.7.9-2+deb12u4_mips64el.deb 553d131f64a66e600743d072e0f07393488f2c4b 619608 gnutls-bin_3.7.9-2+deb12u4_mips64el.deb d1c1866684ec7ec9a3e09cc36d0e5079e2ac7152 11218 gnutls28_3.7.9-2+deb12u4_mips64el-buildd.buildinfo 790d5a3079b227c278dc9cded6ae36accc597cf2 274080 guile-gnutls-dbgsym_3.7.9-2+deb12u4_mips64el.deb 853816a5e00136c5022088c4ecf9c5e7b24ca744 450956 guile-gnutls_3.7.9-2+deb12u4_mips64el.deb ae0e61c6b28b1c56695a597abac3c17e628e1d68 95216 libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_mips64el.deb 028508410d780c28d57ae1fec83be20f4a7b7029 403880 libgnutls-dane0_3.7.9-2+deb12u4_mips64el.deb 890bc768b3083df71948df68245d702fe9b10e1d 96360 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_mips64el.deb 7463c1b135069e3ae0447ffeee6b2962e0a85a69 403496 libgnutls-openssl27_3.7.9-2+deb12u4_mips64el.deb 1ea89f54b0298115208c1d9d2cf19e4e67a83a0e 1357352 libgnutls28-dev_3.7.9-2+deb12u4_mips64el.deb 0e55b1776bf574ef7c10d1fc66912af94db6f0a8 2054780 libgnutls30-dbgsym_3.7.9-2+deb12u4_mips64el.deb f046ba4f4fd5a2a5202b7349a1b9c62b03e50537 1229744 libgnutls30_3.7.9-2+deb12u4_mips64el.deb deb963311a490d3813a09bfd39cd7ff4a4732426 49116 libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_mips64el.deb 09d5348d2699c5067fa45f4a920f867a511e8616 13144 libgnutlsxx30_3.7.9-2+deb12u4_mips64el.deb Checksums-Sha256: 20f39f766036f43fd7100f80880da1064bbfba2fa4cdbdb00c6c55983bf4ed1f 872488 gnutls-bin-dbgsym_3.7.9-2+deb12u4_mips64el.deb 12da951e5af4c62a2ad5e7ff7216d534213ac54777b858d55b2e5f1f78c1871e 619608 gnutls-bin_3.7.9-2+deb12u4_mips64el.deb 0c7e327e449036d6fe4e26c42a27ee007e0fa99a32cf58308533604ad6a100d8 11218 gnutls28_3.7.9-2+deb12u4_mips64el-buildd.buildinfo 1ca51013b3fcc781646446b10004c47b440161811890c292aa6ae092bf1e2101 274080 guile-gnutls-dbgsym_3.7.9-2+deb12u4_mips64el.deb 224ea4122e5637ecca27311a753e329672488a3c606aa27f287b98b040249734 450956 guile-gnutls_3.7.9-2+deb12u4_mips64el.deb 9fa84bd00705aa47a9f6df596b80bf68f2629809c3fabb043780a8dfeee68218 95216 libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_mips64el.deb 27288ef6d538024ee8973f4d562b0614c961df5e8a90eaf3696f80455c508ff4 403880 libgnutls-dane0_3.7.9-2+deb12u4_mips64el.deb a520ea5dd1ba09e9579b872facccccfe0c8de440a163a0aed98f8fea28c04c11 96360 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_mips64el.deb 299b99ab3e1a5fff743ceacbd5075ad4f3ee962b0404a0b1be3d9b2cfbd0c11f 403496 libgnutls-openssl27_3.7.9-2+deb12u4_mips64el.deb 34214b9ae7a9ae45eba08cb98f7092d3e9e75f54531a0baa46d88d1663fbac29 1357352 libgnutls28-dev_3.7.9-2+deb12u4_mips64el.deb ef874400c6b0a8b42f274cf3ce8d0d98836b308ac9314cdfee604415d5c8f424 2054780 libgnutls30-dbgsym_3.7.9-2+deb12u4_mips64el.deb e540db4f0119ec3ce6bf2c25916bdfc20c6236e84165284bc8a8a178d0060e1e 1229744 libgnutls30_3.7.9-2+deb12u4_mips64el.deb 04e4b7ec289fddcd5d89fd2e0ef0b0b9b210f72f70b847b26473c54ad18d2ce2 49116 libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_mips64el.deb e71bb202d74f61a26ca2e2a9f25689ed568d3898a0752a33ec388e770309175e 13144 libgnutlsxx30_3.7.9-2+deb12u4_mips64el.deb Files: 9f8b9d865a330a43ccd009f2ad047196 872488 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u4_mips64el.deb 58021b0cc804a1be42237e733c870d6b 619608 net optional gnutls-bin_3.7.9-2+deb12u4_mips64el.deb 7a52858375f97216503283e55a2f97e2 11218 libs optional gnutls28_3.7.9-2+deb12u4_mips64el-buildd.buildinfo 157019fe61a79ad3305860324409dd0b 274080 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u4_mips64el.deb 83e4de7dd20d3c4ba30605a61e19790b 450956 lisp optional guile-gnutls_3.7.9-2+deb12u4_mips64el.deb 91ff5daae24ff9c0e8c39f12d970c606 95216 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_mips64el.deb 1033d8a97ca9fc700d4a2b82d00952bc 403880 libs optional libgnutls-dane0_3.7.9-2+deb12u4_mips64el.deb 4cff6ab946d148a81501d917c0be563a 96360 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_mips64el.deb 37b78815a8d38ba0d9e253e5b02116e4 403496 libs optional libgnutls-openssl27_3.7.9-2+deb12u4_mips64el.deb 255b637626072408b352bda5d76b0d32 1357352 libdevel optional libgnutls28-dev_3.7.9-2+deb12u4_mips64el.deb bfbd0ed9eca99513f2e6783a4d6c70c3 2054780 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u4_mips64el.deb fc184e008a62bebfff993076f0f34f62 1229744 libs optional libgnutls30_3.7.9-2+deb12u4_mips64el.deb f1d24b50ae54d09aabcbb5b72e2e0e44 49116 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_mips64el.deb d83c2a634237f4b9c03870befb95a02c 13144 libs optional libgnutlsxx30_3.7.9-2+deb12u4_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEunmvxaaGKuI+hxxClmZGXOM83t8FAmetB0IACgkQlmZGXOM8 3t9viQ//TvTV3ObEvw9UvcpvKJq8tFcb4AeimjQWe3we2VwamvZlWGDdXtk/Hpwz 1HqLeNgc+k9HJGoNmFPECb9yge7zj2YtcbzsuxHlJvFKrU1SlgLWco1LEvAQCUDS RgAFYxtu1LShY7cTPe3OXhq/vLYfwVH7W3pX+t+uAwjvbwVIDSZaCUi1YCD8UjnU Rc8gD3TLNtVRNnw6ktkmY30mW3FJsFmFvjd4zB6cd8Uztp647bvlHd6S9tZpEhgj JpVdRs27RDsoGaykefI2ZfiTbDfG/36IzseARcJrk2G2VeiPy7RWRSb7nhqROoLk yAyiI2Tqx6BDWzWZ3yUOCyKwGwLK8HnYEjuENxgXe6EH8mGIp0zzNsp7jrMlAjc5 7W3/FqCS6/SMD1lHpqx3u72zP4hmlRfASZ6J9mMo1AVvB6M0ChsYQQhyGRLPucrp 8k7PIpJwqr5PJHwehB67Oy6Iap++tjDpQC8u1rh7BpVFeB5BtSHKNBWuiVJx2plt s9ubI4ViDGFfYmI9Q3I/FKuMZw9/dGqB1b1TWdN40CBAAT3mLldlci60xhGCBE88 EkFWiWMVml/bafy/Y85wm7BXdeV5fxLJBCEoU53a11wAW0BH5lcaxNIHoHvZ7y/+ R7G69JM4pjLvpZkaeRT40cFLFUr3gh4u0TSElAfYqCF/HWePR2g= =jD8F -----END PGP SIGNATURE-----