-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Feb 2025 10:07:24 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym Architecture: s390x Version: 3.7.9-2+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx30 - GNU TLS library - C++ runtime library Changes: gnutls28 (3.7.9-2+deb12u4) bookworm-security; urgency=medium . * libgnutls: Fix potential DoS in handling certificates with numerous name constraints, as a follow-up of CVE-2024-12133 in libtasn1. Patch cherry-picked from 3.8.9 release. [GNUTLS-SA-2025-02-07, CVSS: medium] [CVE-2024-12243] Checksums-Sha1: d62c857cf1e1cadf1be29abb22b5444b7d97aedf 823624 gnutls-bin-dbgsym_3.7.9-2+deb12u4_s390x.deb 25149c80d633fc939e1562f5482ffcf6ed3dcea0 621116 gnutls-bin_3.7.9-2+deb12u4_s390x.deb ac732c5a5f89debd76cbbe07e16e73dd641a94c7 11162 gnutls28_3.7.9-2+deb12u4_s390x-buildd.buildinfo b98968af91ac0a2a3f9322a96375107ae0f8109f 255340 guile-gnutls-dbgsym_3.7.9-2+deb12u4_s390x.deb 4714eb194489b3f5fbdc9cc1c7eb2c5294c16bcf 457516 guile-gnutls_3.7.9-2+deb12u4_s390x.deb 8e004a470a938ceb775108801d472334c428c403 89980 libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_s390x.deb 4f5c3ffe49cbf525f95573d1fa9b5daf4cdbafa7 404652 libgnutls-dane0_3.7.9-2+deb12u4_s390x.deb 1464ef616704d897f128e3e0297ed7bbce8dfcbd 91020 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_s390x.deb 440a7782e767d1d09d1e865b97db96de0c2d5597 404720 libgnutls-openssl27_3.7.9-2+deb12u4_s390x.deb 34092d7d3e9fb3b421d2f1dc73da923d4488c162 1226244 libgnutls28-dev_3.7.9-2+deb12u4_s390x.deb 8f3b8e4993a01e527a0ff227d25bfccde3910cfa 1948752 libgnutls30-dbgsym_3.7.9-2+deb12u4_s390x.deb dff3fc6adc6dbf9bdf5df3a0cd846657d5fa241c 1283508 libgnutls30_3.7.9-2+deb12u4_s390x.deb 52bd9f7d2dfd53371d6f1d666410221bde8f228d 48308 libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_s390x.deb 157d34adbc914ea3ad1f6e896e2123942ce8d046 13696 libgnutlsxx30_3.7.9-2+deb12u4_s390x.deb Checksums-Sha256: 81cbd9860f2f3fb1b205b77f22d7f52465614d0446ed14748f256baa5ab32ea9 823624 gnutls-bin-dbgsym_3.7.9-2+deb12u4_s390x.deb 657e48f89358438aeb545da49e1c7fdc3a807cc2c14774944ff73f51ffae8152 621116 gnutls-bin_3.7.9-2+deb12u4_s390x.deb 2b3109623009fa26bab779e862edd06560febd72eb6af007c2774fa6b5f1c443 11162 gnutls28_3.7.9-2+deb12u4_s390x-buildd.buildinfo 0eb2f0face8097e5afeefe44c057c8acb7b1fc3a7a06b5062f09e1b62614b0da 255340 guile-gnutls-dbgsym_3.7.9-2+deb12u4_s390x.deb 86214b9ddaaff6a03a7b421f58ddaf7d861226b97c4627998f601d72717f432f 457516 guile-gnutls_3.7.9-2+deb12u4_s390x.deb f6d1d48a808b0267ebc4ae83db02aea59c236fb6e5f9d1edbcc76b486ba2838a 89980 libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_s390x.deb 054f4d5455bcf826d9f59c0a9cb54bd4cbf28002304f5c411dc336390f673a16 404652 libgnutls-dane0_3.7.9-2+deb12u4_s390x.deb 2bbd1a0adfe2d3e765fbc4a7c4fde8a493901e1300d7724aad5891e59fa598bb 91020 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_s390x.deb 4865d132eee92f16ee236b55ad52991b2db83c035bbf4cdec1cb856ba1b1882a 404720 libgnutls-openssl27_3.7.9-2+deb12u4_s390x.deb 174708f185fbe8f3473d52fa2d1f3b6e53a2b63d46bbcd38f0e34a8ed7777d49 1226244 libgnutls28-dev_3.7.9-2+deb12u4_s390x.deb b77390793302cc321ce5f816dc18dcc3741e51617e4bb421d713c693b41668c1 1948752 libgnutls30-dbgsym_3.7.9-2+deb12u4_s390x.deb 127ffd3c3b55a19d6795b0a97fdca8203fdb83129f11943f3301a4647df377f1 1283508 libgnutls30_3.7.9-2+deb12u4_s390x.deb 3ad6285c2ba9d3c9f6834910edf725e648a88a03e84b38870a4754a8475e35e7 48308 libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_s390x.deb 8a4b1185cb190c6edb218da4bfcec88ea45ed04ba0a8422f032d4be7b159f92c 13696 libgnutlsxx30_3.7.9-2+deb12u4_s390x.deb Files: 213ac78c1b881204a0358446f0fdd0b1 823624 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u4_s390x.deb e6efe61ca87f1aa39267b7d9e5931f64 621116 net optional gnutls-bin_3.7.9-2+deb12u4_s390x.deb 3ed38619006d2307f1d259b403699b3d 11162 libs optional gnutls28_3.7.9-2+deb12u4_s390x-buildd.buildinfo 5db4a1778caa403b914ac863c489ae21 255340 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u4_s390x.deb cd468f47c00355560b9ccc32bf101f9f 457516 lisp optional guile-gnutls_3.7.9-2+deb12u4_s390x.deb c0eb0ccc23699511a85468ddff0b8ffa 89980 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_s390x.deb 6318f8dec1405cc42c48882a5c9275ed 404652 libs optional libgnutls-dane0_3.7.9-2+deb12u4_s390x.deb 45e5adca4c2e3b9c02d67fd9388ffaa1 91020 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_s390x.deb 2fe8a2b679404f48e2d194090764bd4c 404720 libs optional libgnutls-openssl27_3.7.9-2+deb12u4_s390x.deb 6e279f337d0a41a013e8433abd56184a 1226244 libdevel optional libgnutls28-dev_3.7.9-2+deb12u4_s390x.deb 6bada15592c5f9d4c28c8bc6277c1f39 1948752 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u4_s390x.deb b0a6f6d6d4889182031473c3fa41bff3 1283508 libs optional libgnutls30_3.7.9-2+deb12u4_s390x.deb 695d9a8b472b568279fad83865e504a6 48308 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_s390x.deb d480b063f53f3ce134ab8e52c58d0aaf 13696 libs optional libgnutlsxx30_3.7.9-2+deb12u4_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmetBMEACgkQAKOyQzsW VavEOg//YIN+HIcTlsj6pMP12BEYURSInvafPLsp03OTojqxtrwxtXNVJzdX6XQw 3oVSZPnZ/RIs4zDsujW44GvF8tpE8BG3n2l3Y9GOiToPu9/UCUKEryuWCUaxPAZd N8otoVRj++dKVax2hnpqBR4STomwtYuON5c4v0BEVsiIlNlnt0B8SHOFX8gCLIti ciyt/VYrVTh0T8NgU4IwMZvQseQzV2set2hoY/CMQB6+mvzlebepVWRZPywIucyS 2pCBYTVGAU/qFUU37+H+9aAXIzPGHQTy+/Pb+Nk/rGfu6CB7BhqZUYFRebz2aixZ Z3RlJNTmqgvCduYtaMh4hHARnMUOeOLf58hlGvEhlEKmCHM7q2BqXROV1UTM9kI9 FAAALBtkUqkBA0ZBtuGu94JOTeYlJwt39pHoDf111er6uyFHPNPt1e1DtgkMtF1M T6DyX7vpHwW+fffaLVLlraCDK+6PR4GAFBw/HVKlfXorBpG2Q0wCVesI7MhBI62n BvzoiGrZIG0wcKOc36q85cWBD/QsEz+BmwPKr/+v6UfLDXutWzQ/f3VCmZnMMJWn 38SRDa/bpuk7JWYRvvNr6NqgQFiQ1pqGNy0bLLEoqNV12xpvo/c/YXbLy9oD6Vy8 fvqeM3Xdi6Ox9qUYoeQlF5cpNb0P9th4Szl8TJQbU06+lC7TVrM= =Vg3a -----END PGP SIGNATURE-----