-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Jan 2024 07:56:15 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx28 libgnutlsxx28-dbgsym Architecture: mips64el Version: 3.7.1-5+deb11u5 Distribution: bullseye Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx28 - GNU TLS library - C++ runtime library Closes: 1061045 1061046 Changes: gnutls28 (3.7.1-5+deb11u5) bullseye; urgency=medium . * Cherrypick two CVE fixes from 3.8.3: Fix assertion failure when verifying a certificate chain with a cycle of cross signatures. CVE-2024-0567 GNUTLS-SA-2024-01-09 Closes: #1061045 Fix more timing side-channel inside RSA-PSK key exchange. CVE-2024-0553 GNUTLS-SA-2024-01-14 Closes: #1061046 Checksums-Sha1: 883f301131a11dbec63047a55337d2672b866488 919632 gnutls-bin-dbgsym_3.7.1-5+deb11u5_mips64el.deb 4a9c3086c3ee582e7de738723990fd64077263f4 624092 gnutls-bin_3.7.1-5+deb11u5_mips64el.deb 84c3b57bd9bea905c279f26da716a6672d4d594c 11039 gnutls28_3.7.1-5+deb11u5_mips64el-buildd.buildinfo db27ebbb4552a13fdc9bc137e0e11a29bec48e9a 241648 guile-gnutls-dbgsym_3.7.1-5+deb11u5_mips64el.deb 2f233e57e1eda76b794c22aaacaebbec91afcc8e 438904 guile-gnutls_3.7.1-5+deb11u5_mips64el.deb 38887af28a36c4f023e1749489e0f3473e683c4f 68104 libgnutls-dane0-dbgsym_3.7.1-5+deb11u5_mips64el.deb 02d93058258d1950f390eeab4f15b78c2fa795f3 393424 libgnutls-dane0_3.7.1-5+deb11u5_mips64el.deb 02fe4fb099c5233e0e2bae694951cb06d89e67bd 68812 libgnutls-openssl27-dbgsym_3.7.1-5+deb11u5_mips64el.deb 2f48acbf73f65a4b62803bfc9156303b7de8ce85 393016 libgnutls-openssl27_3.7.1-5+deb11u5_mips64el.deb 394d4214977fc5c750b4b5237fd0da7d4be257f7 1305884 libgnutls28-dev_3.7.1-5+deb11u5_mips64el.deb e7479d7325e468daeb9c630f63349e882aa0f2a6 1905080 libgnutls30-dbgsym_3.7.1-5+deb11u5_mips64el.deb 473afb28cd3d574da4b5fda0f7c189f2db90555f 1181668 libgnutls30_3.7.1-5+deb11u5_mips64el.deb ac4f32e2f6cf3a712dffbd0da9330901513ad460 51184 libgnutlsxx28-dbgsym_3.7.1-5+deb11u5_mips64el.deb 2b261d40ff605869b612ad291aef8e513c471e1f 13224 libgnutlsxx28_3.7.1-5+deb11u5_mips64el.deb Checksums-Sha256: 24969938b70ef006a73b7017985a4fc11933edf11a15368b1779f13c23df755d 919632 gnutls-bin-dbgsym_3.7.1-5+deb11u5_mips64el.deb dbc8ff277dc68f897a7771ca51f022160ab77f338bde85891cc0633b3387eca3 624092 gnutls-bin_3.7.1-5+deb11u5_mips64el.deb 311277844a8db03d10b20c85744ee4c7a74182ab96c9f4e55fa70cdb789920f5 11039 gnutls28_3.7.1-5+deb11u5_mips64el-buildd.buildinfo e4ba2b81f73e79fa449e99a31ae1369fdddf415b69a2177de852aaaaf377065b 241648 guile-gnutls-dbgsym_3.7.1-5+deb11u5_mips64el.deb 7820927f34e40b6cbd879da03d646259530bf4ab4004ac2794f2e340d6d70283 438904 guile-gnutls_3.7.1-5+deb11u5_mips64el.deb 02caa1ca2e7e69797b6cd11504307dec8cbabe3b88f015f02561d1e6ec495651 68104 libgnutls-dane0-dbgsym_3.7.1-5+deb11u5_mips64el.deb cdfab3b5e64ad6bac4251f197694007a3018d72030fffc8dbb9f88e4fc44f1ca 393424 libgnutls-dane0_3.7.1-5+deb11u5_mips64el.deb 74344de26d5da5294465103ada1a2aa689d7dfb5598660e58038733fa4666924 68812 libgnutls-openssl27-dbgsym_3.7.1-5+deb11u5_mips64el.deb 0ee2ec17b327c177a0790c19ed3ce6241fa750f992ffdbb5a4df2ea42752810b 393016 libgnutls-openssl27_3.7.1-5+deb11u5_mips64el.deb b950ac69f8d6ef4d7d4020304f8ae86470f5421308c7aceca6a570d5074076bb 1305884 libgnutls28-dev_3.7.1-5+deb11u5_mips64el.deb fa6e87e7c915c86a218c892aae1dae871163eaccb27750318123043b19d86660 1905080 libgnutls30-dbgsym_3.7.1-5+deb11u5_mips64el.deb 0f0b2cfeedd1a3d0c26ef72f4a5ef9e851bddfd53b7a90b9bee833ecba930045 1181668 libgnutls30_3.7.1-5+deb11u5_mips64el.deb 847cd249362fb7669370d7bf1de5ac7bb944d0f85606f05bc9c9037718ca430e 51184 libgnutlsxx28-dbgsym_3.7.1-5+deb11u5_mips64el.deb 28b5978382b7c91ab4acc4329fbde2769612ce2386d31627ff4ec0891b0fc58d 13224 libgnutlsxx28_3.7.1-5+deb11u5_mips64el.deb Files: e8edc592060123186504df015e9c3673 919632 debug optional gnutls-bin-dbgsym_3.7.1-5+deb11u5_mips64el.deb 27f63a8f0c9339667361bf0e015808a8 624092 net optional gnutls-bin_3.7.1-5+deb11u5_mips64el.deb 8037e712cb94571dbf77cca94566084a 11039 libs optional gnutls28_3.7.1-5+deb11u5_mips64el-buildd.buildinfo f038f11121371604bcd78244f7ca11c2 241648 debug optional guile-gnutls-dbgsym_3.7.1-5+deb11u5_mips64el.deb c91ea81643027b9702427d0c419a80f1 438904 lisp optional guile-gnutls_3.7.1-5+deb11u5_mips64el.deb 9fa862e83eebe4ce5330be6af1f2ba45 68104 debug optional libgnutls-dane0-dbgsym_3.7.1-5+deb11u5_mips64el.deb 7c58417791d73345cde0f17d3f16ffb3 393424 libs optional libgnutls-dane0_3.7.1-5+deb11u5_mips64el.deb d747e9383e72343bb5584f4e0c0c9824 68812 debug optional libgnutls-openssl27-dbgsym_3.7.1-5+deb11u5_mips64el.deb 48821b5d0d41ca66bfff1a1819694229 393016 libs optional libgnutls-openssl27_3.7.1-5+deb11u5_mips64el.deb a1aa136903ab4f492c22d3f3d049b9b3 1305884 libdevel optional libgnutls28-dev_3.7.1-5+deb11u5_mips64el.deb e5ada0b384b93f1a3135109367ca1d39 1905080 debug optional libgnutls30-dbgsym_3.7.1-5+deb11u5_mips64el.deb f7929423fa3c94374ce237ce886dd2d0 1181668 libs optional libgnutls30_3.7.1-5+deb11u5_mips64el.deb ddd383ce497c69c18acf85bc9636471c 51184 debug optional libgnutlsxx28-dbgsym_3.7.1-5+deb11u5_mips64el.deb 444edef6e58d2f669b9a62d7787a23ef 13224 libs optional libgnutlsxx28_3.7.1-5+deb11u5_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEunmvxaaGKuI+hxxClmZGXOM83t8FAmYMeHEACgkQlmZGXOM8 3t+nbQ/+PJXj7dRfhTy5uhPgo3jbxK8m6WN5ld5mSL5eewFAaBpRY5ABAU5gBgbx qlADrmex6Ra/4Xj5gTZTvG7Q0kXaTU5ARJrOqeEunA7dgeC+/5RRVNGflJZ+FBp/ nKue9Y6fd9KWDmW0HIPiS1TlpD+pUjQ2Dx1yE3eWNY7jYCrE61NsHD/4G3kc4+ov 7JTp+b0FUDcG7Q1xWIZlVG2SkEhkuxRgcrW2sfwBb2nMwe3vTzzxzJZull98rSt9 u740ci9h9WDn+j5iurTd8ByBw6VhLyrnp4Sam0TvrcuBgCloLLYH5OPKpGiTHH99 PgsAGC34Ew6wGpD5SiCxyTgcurdKar/plMP1bjRPtklvG5cBjjJTdjlPuySXwv5W +xlciBYNJ72FP8w3OxjSDysdzAE2JVHd/fhnTNFEdM+LG8lqtRzpZJ6JUCLbJ9f2 /jKyeO29wlxkBt6FMmZssy3BKoqXBg2DwDwVydcMVBdXutPU75nncWqgrxXWBIO4 Rj7R/xXcGk9Y6bRySp3xTS7Vr3xGzeSf3KWuGQ75dnXckpGDah4QqWuLBBifyoFd MQ5e94ohdxxQB7/GlWxrwVjOGnl82V5CmW7aIeKcG5dLRxiLTW7AO7DAtqRumzzo 1E/eNfwgGpJ35vsvFOnxWLYLIkB2L8euAj6LNO11kRjFV0OtfP8= =Gejh -----END PGP SIGNATURE-----