-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Feb 2025 10:07:24 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym Architecture: ppc64el Version: 3.7.9-2+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx30 - GNU TLS library - C++ runtime library Changes: gnutls28 (3.7.9-2+deb12u4) bookworm-security; urgency=medium . * libgnutls: Fix potential DoS in handling certificates with numerous name constraints, as a follow-up of CVE-2024-12133 in libtasn1. Patch cherry-picked from 3.8.9 release. [GNUTLS-SA-2025-02-07, CVSS: medium] [CVE-2024-12243] Checksums-Sha1: ddf2a356edf9b6df475a8794b16ef876081c8c32 857256 gnutls-bin-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 5b280495bc16074f0a93f2e154909c1cf2cd6fb8 640212 gnutls-bin_3.7.9-2+deb12u4_ppc64el.deb 6ac9ceedb90205081b4ce286f4dfa06d3461b961 11329 gnutls28_3.7.9-2+deb12u4_ppc64el-buildd.buildinfo 732b00b3696bf8e30ee423625d7b68bfe9555de3 268124 guile-gnutls-dbgsym_3.7.9-2+deb12u4_ppc64el.deb e67ce6724fc138cddd6e4574606941926dd9ff7d 463052 guile-gnutls_3.7.9-2+deb12u4_ppc64el.deb 6f79d31854f180eac136d8d669e1107752281fee 94716 libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_ppc64el.deb a3470c7bd321a49bf16c8640921165a49f6484e6 409120 libgnutls-dane0_3.7.9-2+deb12u4_ppc64el.deb 2b6b72950c3f1c41a36e67df085bd2d5173e482b 95784 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 3a6e2a8503491077fc52e77c3bdef3d29558b4f8 408904 libgnutls-openssl27_3.7.9-2+deb12u4_ppc64el.deb d88721483d2d860a5b584f6d14b9fe7e0ea90b82 1413040 libgnutls28-dev_3.7.9-2+deb12u4_ppc64el.deb 391b0980d79bf0eb5c5b912438e0ed75db1f4c60 2057520 libgnutls30-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 7a93cece11b8db892f2d0757a12c37da680e14a1 1370212 libgnutls30_3.7.9-2+deb12u4_ppc64el.deb e386bc53db16762e1c708b989cb38127c9c44055 49948 libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_ppc64el.deb aec09da236b52f67501be04c34d9618ca89689de 14572 libgnutlsxx30_3.7.9-2+deb12u4_ppc64el.deb Checksums-Sha256: 907320b6346c3a3e5dd74fde60c4107d6c4047ee14584e14c0a731eb060c5742 857256 gnutls-bin-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 2574a1144307574155999869f12c5e1cb52037911db9b04c7714bdb74ee4546d 640212 gnutls-bin_3.7.9-2+deb12u4_ppc64el.deb 6fee0ea0608ca2d03e800bc7570cbb94b053863b430f830c441f37e0e80cc184 11329 gnutls28_3.7.9-2+deb12u4_ppc64el-buildd.buildinfo c56e2cef796c74053644e76b6a1497975f1d0892b7843aac3975c5b1a78ce387 268124 guile-gnutls-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 63328c1e59fc71244fdbe2c710f823ee1dadf0bc019d3a94ac26b662b6f8d714 463052 guile-gnutls_3.7.9-2+deb12u4_ppc64el.deb 29ec46b117141ed20559dd6474ef051190bfbd50b17dcbfb16c936282d284af2 94716 libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 63e7d2ff4677ec0aa7dde68d0f18abb63c7208b0cb34e7b9e9527af4470b59f8 409120 libgnutls-dane0_3.7.9-2+deb12u4_ppc64el.deb 577ac746ac9a7a6e386b51ef8b6e38e3012b98d2760f95bd3031b308667950fb 95784 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_ppc64el.deb f9fc1206b80019d70f32cdfbc4ddced955cfb72ce71206c5054ab42814f8bf02 408904 libgnutls-openssl27_3.7.9-2+deb12u4_ppc64el.deb 8fecbf7dd6f46cc412322a1109a822554b2afc23266dfd2153e2a8b6152f03a2 1413040 libgnutls28-dev_3.7.9-2+deb12u4_ppc64el.deb 40998b527142e2e559629dd622e21123f9317d65f3e20a938d1a8c758f13cbc3 2057520 libgnutls30-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 4f607df70275ed3465ade7cd362c9ef8096dc7311658675793e3031052d11d8a 1370212 libgnutls30_3.7.9-2+deb12u4_ppc64el.deb fb1f49676d4bea66a0667f6fc6715658dc129365c12fd0e745a1c1ce5769d742 49948 libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 6da61ce35b6cfad3bb77db2a820de7ef7e9331d82f3e8da3a956c67e9daf5892 14572 libgnutlsxx30_3.7.9-2+deb12u4_ppc64el.deb Files: 74969f51e9fa60894bdbb389cd870898 857256 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u4_ppc64el.deb f5284724b9db36396f9498b0ca52debe 640212 net optional gnutls-bin_3.7.9-2+deb12u4_ppc64el.deb 01ee678e0f60baf7761e4ed7dead4f40 11329 libs optional gnutls28_3.7.9-2+deb12u4_ppc64el-buildd.buildinfo c0021b15f8992e736a52e96d7eec796b 268124 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u4_ppc64el.deb f3cf0dded942440bf3c420e76a0e464a 463052 lisp optional guile-gnutls_3.7.9-2+deb12u4_ppc64el.deb ac2a9538e8b8c8663c0609c4fd557e84 94716 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 031132487a84fa33ef79618f29cd5713 409120 libs optional libgnutls-dane0_3.7.9-2+deb12u4_ppc64el.deb 9ed3a111d49c97cc45adff0bb9362b42 95784 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u4_ppc64el.deb f343215b52a771c7c36610031a09137e 408904 libs optional libgnutls-openssl27_3.7.9-2+deb12u4_ppc64el.deb 7f6f123b64fba0fdbbbed46f6064a761 1413040 libdevel optional libgnutls28-dev_3.7.9-2+deb12u4_ppc64el.deb 92d1e0cd5b9ec16ef3a61babad1b89a0 2057520 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 2d060cb7ca2302eb7694cf292019674a 1370212 libs optional libgnutls30_3.7.9-2+deb12u4_ppc64el.deb 03e2a234e6bf0e1d2d32af2f342571ad 49948 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u4_ppc64el.deb 7b514949268db87a852da1c2b44da1b1 14572 libs optional libgnutlsxx30_3.7.9-2+deb12u4_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvNkWZvjZkiWgJGRETMSrGPLkYxUFAmetA7gACgkQTMSrGPLk YxWR+hAA3dE+a3ltKaZx8o2RzUY3sh3qn/3nZfm3P5CN1F5pZ/ARwKIoh7bW1AF7 xOL5uZcSVz4pokKJ8scIXEtGL+lBCqVjIHqgDiVchRqdC3GZRtVuEOswRjZj2Ur0 e+DXf4uGvZTA/PjJr6iBCHniLykcCv/rM8T6VPi7bPSeKsoL0JBGFdBbobmRPgTg MnqISPR8urQek9OtyCz/13oSZWA/t3TkRgeO34655N7YbT0ce7oVflz2Iwx5g8U1 QUiUQtu7BtuHZq83UDBdMI08JAOTVhVeAPsOHiSWz378eyY83MTwALqPnd8LgBm1 2OqIVs9jUAPS4mx9qHp4QGyYgWWQcGlVd1j6AUus1WmxiH0ULgazJwJRQA0LJWBM lRDrOgoYIOu9wE/xhhOUp7+rINjZjs3gYiObFLSsxUsnAXXHaBVdAEEdjOup7wrf bt8LYUwR+DYWLt99aW0fnjGxPghtAOBmG6KV/5wIl+2y2oN+vYn4K1RuLXAXQU2Z 9qvkV/K3nGBo0X9aBIQtAmI7+8YoawS8cnV+MJqubikpITCKucp7vVO7bkx60hfE qET76QE8Olb94Aw9xdYNCTapgILakBQe6XSt1gGwxDbonG3iqf4ZEonQB8vzsEF4 2uM6clzoyGHqks9q+E6jD9SzmDT2vK98cMdTCpBcUznbRaQqwvo= =k7Vu -----END PGP SIGNATURE-----