-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Jan 2024 07:56:15 +0100 Source: gnutls28 Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx28 libgnutlsxx28-dbgsym Architecture: mipsel Version: 3.7.1-5+deb11u5 Distribution: bullseye Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Andreas Metzler Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx28 - GNU TLS library - C++ runtime library Closes: 1061045 1061046 Changes: gnutls28 (3.7.1-5+deb11u5) bullseye; urgency=medium . * Cherrypick two CVE fixes from 3.8.3: Fix assertion failure when verifying a certificate chain with a cycle of cross signatures. CVE-2024-0567 GNUTLS-SA-2024-01-09 Closes: #1061045 Fix more timing side-channel inside RSA-PSK key exchange. CVE-2024-0553 GNUTLS-SA-2024-01-14 Closes: #1061046 Checksums-Sha1: 2c0d791053ba218ef2899a1ff568e9f2d920a2f0 875016 gnutls-bin-dbgsym_3.7.1-5+deb11u5_mipsel.deb 06e672f83604c1938f07d52590e19f7b97f8c98d 627184 gnutls-bin_3.7.1-5+deb11u5_mipsel.deb c959b62a15fa08b947af92fb3791d3344e7cd577 10950 gnutls28_3.7.1-5+deb11u5_mipsel-buildd.buildinfo 3f241c2e279ab9115cb694fb98391d677dcf7f7e 230348 guile-gnutls-dbgsym_3.7.1-5+deb11u5_mipsel.deb 196f745e86dd82ab3cf0217fbefab4db90439cb6 438832 guile-gnutls_3.7.1-5+deb11u5_mipsel.deb d48154b0d4d506f426e063711a6879776a64b8cb 64580 libgnutls-dane0-dbgsym_3.7.1-5+deb11u5_mipsel.deb 60a4f72875da1f8d14d7354b5b0ed5cac756788a 392896 libgnutls-dane0_3.7.1-5+deb11u5_mipsel.deb 1c3b9425f1b45a8e9ca6609e4f685dfc2ceeda62 65480 libgnutls-openssl27-dbgsym_3.7.1-5+deb11u5_mipsel.deb 7cd7aa0945d8f344dc26086b322b6085aa05a84e 392636 libgnutls-openssl27_3.7.1-5+deb11u5_mipsel.deb f9bf6f8ecf2218125c2d3081bff105ffcbb027d8 1313060 libgnutls28-dev_3.7.1-5+deb11u5_mipsel.deb 513961b7ed42ba4da1baa1c6a2db1b300dde0f5c 1812692 libgnutls30-dbgsym_3.7.1-5+deb11u5_mipsel.deb 853b4e806a427826cdff88cdaf2be720b6965c88 1187484 libgnutls30_3.7.1-5+deb11u5_mipsel.deb 592c44b20152ea73564b46209e99bb89a463b264 48848 libgnutlsxx28-dbgsym_3.7.1-5+deb11u5_mipsel.deb 16d2b5074900748d75fef70d77e8ccd80fdcfdaf 12972 libgnutlsxx28_3.7.1-5+deb11u5_mipsel.deb Checksums-Sha256: 2c282a0229706d17a452616f9d1ba1933173473edda5cbe183a89413ec8d580b 875016 gnutls-bin-dbgsym_3.7.1-5+deb11u5_mipsel.deb bafe65ba1729f27321e8d5007b7f2fc9f56434658d08b130e9b22719e2d3c564 627184 gnutls-bin_3.7.1-5+deb11u5_mipsel.deb 1a404ae01760464977b352d35fd42713b2b059d1b00821d2252af8a582da3648 10950 gnutls28_3.7.1-5+deb11u5_mipsel-buildd.buildinfo befd3f0aafc306918d8c9c3b039211a47e85192cfe111c0f4af12a1067c24e3e 230348 guile-gnutls-dbgsym_3.7.1-5+deb11u5_mipsel.deb fbf33086acd1fae5c5dbe6dc210e4e50d56cd2e281c29a43c57fac11f711916d 438832 guile-gnutls_3.7.1-5+deb11u5_mipsel.deb f6bd203c980cb040c5ded6969f3cdd476832f65b9dfd6fe109fe6f8d9777e05f 64580 libgnutls-dane0-dbgsym_3.7.1-5+deb11u5_mipsel.deb ca3b76133bc6204bf69638e396cceedbe80556682443f41ec438ca6a40176b0f 392896 libgnutls-dane0_3.7.1-5+deb11u5_mipsel.deb feb47fa461915132ddb97e6dc6cea60d11c58a992ae113215234fded17fc1504 65480 libgnutls-openssl27-dbgsym_3.7.1-5+deb11u5_mipsel.deb 8a1e514ff95c51a41306532804d33aaf59909fdf4e48ea90e6e648acad43738d 392636 libgnutls-openssl27_3.7.1-5+deb11u5_mipsel.deb 4e2c92a56253c0e98549498d954d0e299da374ab802bac5796bab175425c0964 1313060 libgnutls28-dev_3.7.1-5+deb11u5_mipsel.deb b852fd61b0d85534be15c17a222d0d1b00d8ae291233e798dea6962bfd99a990 1812692 libgnutls30-dbgsym_3.7.1-5+deb11u5_mipsel.deb c75cb5ae866e789e67d7dc0f33bd688dfd930c23d4a35797c3fadb6d8341abe9 1187484 libgnutls30_3.7.1-5+deb11u5_mipsel.deb 8f0eb6a0503be7a1052143cef308b6e58772af6af2a51bc3108f192bba60bf0d 48848 libgnutlsxx28-dbgsym_3.7.1-5+deb11u5_mipsel.deb 3274ca4d9ebed1f335623aa237b6d37c3e313ab21a4aa6e792e324a8f0402011 12972 libgnutlsxx28_3.7.1-5+deb11u5_mipsel.deb Files: 8cbcee9bcb991f4da5211c5e255ce84e 875016 debug optional gnutls-bin-dbgsym_3.7.1-5+deb11u5_mipsel.deb b2ead9368d76b033de148829b5dfdc77 627184 net optional gnutls-bin_3.7.1-5+deb11u5_mipsel.deb c8514fea9ad7d8eee315e7cb5fddd940 10950 libs optional gnutls28_3.7.1-5+deb11u5_mipsel-buildd.buildinfo b93dd72ea8b7385b15554768c646db81 230348 debug optional guile-gnutls-dbgsym_3.7.1-5+deb11u5_mipsel.deb 968c99d5d5a38e9a4bd0c2ff81f7a601 438832 lisp optional guile-gnutls_3.7.1-5+deb11u5_mipsel.deb fd0e223461ad047375362af317e86e66 64580 debug optional libgnutls-dane0-dbgsym_3.7.1-5+deb11u5_mipsel.deb df5d09851f95d93758a44e7c55cb1cd0 392896 libs optional libgnutls-dane0_3.7.1-5+deb11u5_mipsel.deb b4c3c15696b4118bc8897288ad1b555d 65480 debug optional libgnutls-openssl27-dbgsym_3.7.1-5+deb11u5_mipsel.deb 059f5f11e10d135be00369bdd928047d 392636 libs optional libgnutls-openssl27_3.7.1-5+deb11u5_mipsel.deb 35ae4d929039652cfbec25d55ae506fc 1313060 libdevel optional libgnutls28-dev_3.7.1-5+deb11u5_mipsel.deb c6a265193c72447d5fb98244f2c058fa 1812692 debug optional libgnutls30-dbgsym_3.7.1-5+deb11u5_mipsel.deb 38b8665d3f4d2dc145813636be25404c 1187484 libs optional libgnutls30_3.7.1-5+deb11u5_mipsel.deb b2594d60cad531fa6a7fe73fef02cfdd 48848 debug optional libgnutlsxx28-dbgsym_3.7.1-5+deb11u5_mipsel.deb 696f05fe12110a79d4572938ed080a4f 12972 libs optional libgnutlsxx28_3.7.1-5+deb11u5_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuQAPGkYIXAAfq7z1C2Vm2FYVKKAFAmYMdh4ACgkQC2Vm2FYV KKCHlg/+POfGIiEwwulkOw561uAg1PktZ263vgxG3G+vhYlp0cvC3GPbQuB+2Gwi b7oTwCHjgPfCekoFPVhdeDHNV6IPj4Nvo+UsLCaajsfKp+0Huc07OQfN2YgPdK1S uB4YyRq+LaBSMp37ZRUizoccplyncjp0zdxOA1LtWa/CIDnhV9mUP9TQbX1tyokC bZEg+LHztnyFx35ApXN9u9j2NJIjEooEyQPlsvgZ48uVMIR7iLZy5AnBZbxID0pl 7x2i9h0fkomy5Dr3oCNJD0iROVH36OSUVsbbPSqmNU9o1GOJZcV4m6O2ddiTyF0l dxgjFUXEpgE/KFTgjxizDoJF1S5sUoOpjwabp85TbvgMRV98vpRiXF6IIZDbCJQ2 Mh9havomylpjFaMe4Z6jmV92SD2Wrc1EA5KiNl2X7Kvfxuqjp+CI9E3vMOn1BZKZ STbvR8gydAWI1mC5HXW/j1i+sbKLd3ul4u0CqMNIGH1fi5IK5UH9WMTWdWB/FRyr dBn4agdJqWEa70IbOQsQTwMtQRJLOIaEdyaxcEtUmi9yDZvTi54VcSCbBQba59YX KqQfsbOGncmCgji+RNvZOA8ObQzXKrTl3ZRFd++g63dQszS1FVDK6qb9ac35PtY7 3Ozj7snhDgQfHkLkvDzrMxiSaxSp9NcyZLv5Im3BiLns/j48PdQ= =X2HL -----END PGP SIGNATURE-----