-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 May 2026 13:15:39 +0200 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym libgnutls-dane0t64 libgnutls-dane0t64-dbgsym libgnutls-openssl27t64 libgnutls-openssl27t64-dbgsym libgnutls28-dev libgnutls30t64 libgnutls30t64-dbgsym Architecture: amd64 Version: 3.8.9-3+deb13u4 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities libgnutls-dane0t64 - GNU TLS library - DANE security support libgnutls-openssl27t64 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30t64 - GNU TLS library - main runtime library Closes: 1135319 Changes: gnutls28 (3.8.9-3+deb13u4) trixie-security; urgency=high . * Add 3.8.13 patchset from CentOS 10 security release. Fixes CVE-2026-33846 CVE-2026-42009 CVE-2026-33845 CVE-2026-42010 CVE-2026-3833 CVE-2026-42011 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-5260 CVE-2026-42015 CVE-2026-3832 CVE-2026-5419 and also adds a couple of fixes for issues without CVEs assigned. (For Debian base64-encode a testfile, quilt does not support git binary patches.) Closes: #1135319 * Drop patches irrelevant for 3.8.9 from the CentOS patchset. The PKCS#11 [provider] feature was only added in 3.8.10. * Cherry-pick another patch to add a mising declaration. Checksums-Sha1: 0bbad7c2d11df46d106a5f30b04df30e69b35afe 1020928 gnutls-bin-dbgsym_3.8.9-3+deb13u4_amd64.deb 9beaeabc113f7c5bb27f6d89a3a62009d9bb62e9 692668 gnutls-bin_3.8.9-3+deb13u4_amd64.deb 4b8902ecf6efd07e52f8c681bbc7575672c309ec 9745 gnutls28_3.8.9-3+deb13u4_amd64-buildd.buildinfo b5641fda7864207cccc057c1ce5979019bbe1e67 104164 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_amd64.deb c575119959260b26989ae30b91ec7a8303c80efd 455908 libgnutls-dane0t64_3.8.9-3+deb13u4_amd64.deb 218da1d66ec72428ef63e101c7b9dee92303e116 104364 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_amd64.deb bfc49d91aa0199d798c5bdfa2e0d0878c1876d66 455752 libgnutls-openssl27t64_3.8.9-3+deb13u4_amd64.deb 36ab8dd7417696cf1bc2373c97cbbe269637ee26 1410552 libgnutls28-dev_3.8.9-3+deb13u4_amd64.deb 400540dc62bbdf564a332984585cc5f8af0baeaa 2168096 libgnutls30t64-dbgsym_3.8.9-3+deb13u4_amd64.deb 72f4c6cf757e4af0acf000271eec501c06f7a97d 1469024 libgnutls30t64_3.8.9-3+deb13u4_amd64.deb Checksums-Sha256: 4a7ee27e9c38b7e8e6616501198e7cf43b08e365a03c4b4d8d0bb3ec2822f57c 1020928 gnutls-bin-dbgsym_3.8.9-3+deb13u4_amd64.deb caa3f9496ac350122fa12ca94b13aa8c5b507f6fcd931100a8eb128f8194f9ef 692668 gnutls-bin_3.8.9-3+deb13u4_amd64.deb 2ebe1c9cabfefead601af194de0c1669e164fdd7d1ce9cb4b2c25c11d7847fd6 9745 gnutls28_3.8.9-3+deb13u4_amd64-buildd.buildinfo 1fc8c56ee392a46fba6a9cb856a90cc346477ddb61c55185933d05d54da284b6 104164 libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_amd64.deb 119a357b321614be7e17655cccbf767bd55b136d1ad722d3e80fb99d862fe2f4 455908 libgnutls-dane0t64_3.8.9-3+deb13u4_amd64.deb 2b426857626838097267dd7d885c9ec6ade1b21a5a0b4df3d72f4cb967f631ce 104364 libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_amd64.deb b7d1252b21d4e10bb46dcd97b5f8dd5a6412f166e945f386bc908c9b2cb82b44 455752 libgnutls-openssl27t64_3.8.9-3+deb13u4_amd64.deb f7048cead574f6142449a3b4089b042a42372a6b76d900324156ae97dbeb08ed 1410552 libgnutls28-dev_3.8.9-3+deb13u4_amd64.deb f43dc84aa54ae81236166a866678fdc1e65eda3f663ecc778369468665141d31 2168096 libgnutls30t64-dbgsym_3.8.9-3+deb13u4_amd64.deb 18a8bdfd91c7e3bcb01719d55a2b56849c7160b34f1f52b1c4fdfdd41bf1352b 1469024 libgnutls30t64_3.8.9-3+deb13u4_amd64.deb Files: fab21140e4623616ea0f22a3de169a55 1020928 debug optional gnutls-bin-dbgsym_3.8.9-3+deb13u4_amd64.deb f007c62fdc477db4d507db1bd0120815 692668 net optional gnutls-bin_3.8.9-3+deb13u4_amd64.deb b489cf88d1cf6e6cb26eff084188cf20 9745 libs optional gnutls28_3.8.9-3+deb13u4_amd64-buildd.buildinfo 8fadc17b6eddfc0b1ac4b7222aefe22f 104164 debug optional libgnutls-dane0t64-dbgsym_3.8.9-3+deb13u4_amd64.deb 9b85ff012ad557685113e186602c8fd9 455908 libs optional libgnutls-dane0t64_3.8.9-3+deb13u4_amd64.deb 14418c637e3c885bf5f5019dc6b73327 104364 debug optional libgnutls-openssl27t64-dbgsym_3.8.9-3+deb13u4_amd64.deb 2bf370541ab0893c87364c8cc8b69a5b 455752 libs optional libgnutls-openssl27t64_3.8.9-3+deb13u4_amd64.deb fe3220e2731ef7a7de095435d7137f9c 1410552 libdevel optional libgnutls28-dev_3.8.9-3+deb13u4_amd64.deb bfb59739a1bda6edfc5c5926203e25f4 2168096 debug optional libgnutls30t64-dbgsym_3.8.9-3+deb13u4_amd64.deb ce391a9ff4974eba985481ee3eaf34a5 1469024 libs optional libgnutls30t64_3.8.9-3+deb13u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmoAeSwACgkQGNGWmfrq ILH/cA/8DshW1j2Fi7tzhhXcA/zkrkq9yhiw33+ICRPjgtvi+MccrFXOxg4aMpMB elF/g9Yitg+SYeNGYGhiFnkC7S5bhQgsFG4UGOg27Qoj3e5cq98V1hQ2TP1haHrO 2xGSDXM5v3wkw/Iuf5pu4T0kbwDHXjFW2KaQLOUuqe/v4RA2tuchO1jMbvv9hpVw 0iPtNZHNPh2JvbuKMXo2CdAuAK2BWSCkSJc/eF0miPP+l/+4KsjVzTmGY/MkVKO4 Z/aO/49IeN2Em/nuRikUPLaNjkXED0W8C78WyqhYDv0Xexcuf3FDsYQJOy0Q3sMx ddZJcEJp396jETtIVnMGwETr5Xm7vkptB0p6ZuEr832SQnEyzC8gqXZrxEmn+IYE LGLVxYbB8VHs6qClSzYM3hJ323ImTMIBL6i+s/oE2BNZdiqYec+h7uZV1bDqIV5i H4fxnHucAw9m5FK8faaJyFmSfIhE7slJaX0Nm7A5paDF29Zrseb6/D+15c6Knp+6 GchwX0XlT+hcVTrE6E2iFRf5L60aC/cA3FuDMGeMOL7NRuTa3Diw3xMXK1r/AjqX 63++vdgTWyNsmXWbz372i0ik8E2x/a7Ok+h9sjEiYUK6ljT8q+8Yqcbv4GLtIIdz ex//KIU4vk+USGb9kiLNOMN6mIvyZko6qKXngpMIiMDZ3+11YyY= =odn5 -----END PGP SIGNATURE-----