[From nobody Fri Apr  3 20:35:08 2026
Received: (at 1130152-close) by bugs.debian.org; 3 Apr 2026 19:32:08 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,
 HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_NONE,
 USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 89; hammy, 150; neutral, 143; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz,
 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:38458)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1w8kFU-00Auru-1S for 1130152-close@bugs.debian.org;
 Fri, 03 Apr 2026 19:32:08 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by mailly.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1w8kFT-00Bp91-0P for 1130152-close@bugs.debian.org;
 Fri, 03 Apr 2026 19:32:07 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=q/03qMKDphyagyf54UW6wgkUtjG+Ii8k8xkwM4eB2Xk=; b=LDjY/wN4mppgS39xh6ykLlf5Nh
 vHxU7ouHd5zGt7XS0Ydw6/mEUCPU07yfAhwtpFdZTwDgzNZPR8nkS9ddLagM48J1VNgr0nSJSfH4u
 2XG05o4te2aPiAXsGR8EOOJWM7f2zyIdovhFSAza4caKYv7FSgozZgswie4YXU7htNCl34ybNLbfg
 9AGTb+bMtEzVktXAxcaOM9W04OHvClxPqxE0vXRduWdFCGoDlzJvQkoXQa3JX0tElXSjVLq64yozE
 h8o0DNRhqdtdQ+kX3ZCG7S8pHQKG25xWRDNRGbljZxKCJbTFrBJsol6KjBM0vAPo0RAA6PAsG7XYp
 hqYNAXMw==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1w8kFS-000000067Ou-0yAN; Fri, 03 Apr 2026 19:32:06 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: Andreas Metzler &lt;ametzler@debian.org&gt;
To: 1130152-close@bugs.debian.org
X-DAK: dak process-policy
X-Debian: DAK
X-Debian-Package: gnutls28
Debian: DAK
Debian-Changes: gnutls28_3.8.9-3+deb13u3_source.changes
Debian-Source: gnutls28
Debian-Version: 3.8.9-3+deb13u3
Debian-Architecture: source
Debian-Suite: proposed-updates
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1130152: fixed in gnutls28 3.8.9-3+deb13u3
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============5262034256594666112==&quot;
Message-Id: &lt;E1w8kFS-000000067Ou-0yAN@fasolo.debian.org&gt;
Date: Fri, 03 Apr 2026 19:32:06 +0000

--===============5262034256594666112==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: gnutls28
Source-Version: 3.8.9-3+deb13u3
Done: Andreas Metzler &lt;ametzler@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
gnutls28, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1130152@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Metzler &lt;ametzler@debian.org&gt; (supplier of updated gnutls28 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 14 Mar 2026 07:19:14 +0100
Source: gnutls28
Architecture: source
Version: 3.8.9-3+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: Debian GnuTLS Maintainers &lt;pkg-gnutls-maint@lists.alioth.debian.o=
rg&gt;
Changed-By: Andreas Metzler &lt;ametzler@debian.org&gt;
Closes: 1130152
Changes:
 gnutls28 (3.8.9-3+deb13u3) trixie; urgency=3Dmedium
 .
   [ Simon McVittie ]
   * d/p/51_handshake-only-shuffle-extensions-in-the-first-Client-Hel.patch:
     Preserve extension order across client Hello retry.
     This resolves an interop regression in 3.8.5 with servers that enforce
     the RFC requirement that the Client Hello after a Hello Retry Request
     has the same extensions as the original Client Hello, in the same order
     (Closes: #1130152)
Checksums-Sha1:
 a240c41569ff24495ba28f21ecf767da6404823b 3269 gnutls28_3.8.9-3+deb13u3.dsc
 a82ecd16b9dc98a9cb9f5b073e05adba087827c8 104292 gnutls28_3.8.9-3+deb13u3.deb=
ian.tar.xz
 383a05278723035668e02f515f0409e53c0bebf0 5928 gnutls28_3.8.9-3+deb13u3_sourc=
e.buildinfo
Checksums-Sha256:
 5e2a16a2799734e49f8d1fa51d91a19c9522509516246dea673666f0cfd5340a 3269 gnutls=
28_3.8.9-3+deb13u3.dsc
 4f85a45e433139064d866a9dbe96a2f8d7b457ee6e2abe6afd36efb507b920ac 104292 gnut=
ls28_3.8.9-3+deb13u3.debian.tar.xz
 05d57e6dedb627ac71137a1c6b50cb7296933b7fff7e705dbde307a13a6e1c7b 5928 gnutls=
28_3.8.9-3+deb13u3_source.buildinfo
Files:
 b8d3c43fe570f232ff137da7e66d0dfa 3269 libs optional gnutls28_3.8.9-3+deb13u3=
.dsc
 b22516fff5554276079ca638d9b1a720 104292 libs optional gnutls28_3.8.9-3+deb13=
u3.debian.tar.xz
 1ca299515822818228e10f2dc3c33b64 5928 libs optional gnutls28_3.8.9-3+deb13u3=
_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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3D
=3DOqOt
-----END PGP SIGNATURE-----


--===============5262034256594666112==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCadAVtgAKCRCb9qggYcy5
IUcfAP47etJZ4myQNKMJAdRTugQsXONOxGAEO4VmTE33c0dLKAEA4+7FJwRCD+a1
VoeHUGHw5I5eKJJrB+9fokgkg8wPJwE=
=vtXF
-----END PGP SIGNATURE-----

--===============5262034256594666112==--
]