[From nobody Fri May 22 22:19:05 2026 Received: (at 1135319-close) by bugs.debian.org; 22 May 2026 21:18:29 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 91; hammy, 150; neutral, 198; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:48220) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQXGH-00GVY0-0h for 1135319-close@bugs.debian.org; Fri, 22 May 2026 21:18:29 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQXGH-006k2z-03 for 1135319-close@bugs.debian.org; Fri, 22 May 2026 21:18:29 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=FYP4wgQCb2tR1HLEMZH5MODs5ae+s7RdlgmOH3m7T/4=; b=TX/LK00810J6KVquLTQjBx6azC JzgfQqU+PqjxoTYuycPq7d1upIpsH74N9pXv/ilufXJdbEYflgZiO72GENrSczDdiHJUwBTvsHHNq oFl0efR+lY8UTpEQcZFAaFU6gH9tX37hunuhPA/jMFZxnL7hFpBSWsSfBcEN7AhPtW2QM7Pt4oecO oN42mZNm6kEEwjpvhN5dO6+3keCg399xV/BfyPtsMqleHAMY+DEJ3BfKStWf6Bptuf1lCWxEYDRzy qfLfYCu5TcRoUpRKBsrFZ33H5LNi4vdHUH+FWa5qa5QFy3hu47RLePbRtaTJroEg2WegSFFEwN5fW R9jBGjjQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wQXGG-00000008hQz-0t0G; Fri, 22 May 2026 21:18:28 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Andreas Metzler <ametzler@debian.org> To: 1135319-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: gnutls28 Debian: DAK Debian-Changes: gnutls28_3.8.9-3+deb13u4_multi.changes Debian-Source: gnutls28 Debian-Version: 3.8.9-3+deb13u4 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1135319: fixed in gnutls28 3.8.9-3+deb13u4 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2036990032795251889==" Message-Id: <E1wQXGG-00000008hQz-0t0G@fasolo.debian.org> Date: Fri, 22 May 2026 21:18:28 +0000 --===============2036990032795251889== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: gnutls28 Source-Version: 3.8.9-3+deb13u4 Done: Andreas Metzler <ametzler@debian.org> We believe that the bug you reported is fixed in the latest version of gnutls28, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1135319@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Metzler <ametzler@debian.org> (supplier of updated gnutls28 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 May 2026 13:15:39 +0200 Source: gnutls28 Architecture: source Version: 3.8.9-3+deb13u4 Distribution: trixie-security Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.o= rg> Changed-By: Andreas Metzler <ametzler@debian.org> Closes: 1135319 Changes: gnutls28 (3.8.9-3+deb13u4) trixie-security; urgency=3Dhigh . * Add 3.8.13 patchset from CentOS 10 security release. Fixes CVE-2026-33846 CVE-2026-42009 CVE-2026-33845 CVE-2026-42010 CVE-2026-3833 CVE-2026-42011 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-5260 CVE-2026-42015 CVE-2026-3832 CVE-2026-5419 and also adds a couple of fixes for issues without CVEs assigned. (For Debian base64-encode a testfile, quilt does not support git binary patches.) Closes: #1135319 * Drop patches irrelevant for 3.8.9 from the CentOS patchset. The PKCS#11 [provider] feature was only added in 3.8.10. * Cherry-pick another patch to add a mising declaration. Checksums-Sha1:=20 d951d114b353d17ccd1a10cd7eb950d63582e11c 3271 gnutls28_3.8.9-3+deb13u4.dsc 64963c11663d6384123657509dbaa0556e6122c7 140880 gnutls28_3.8.9-3+deb13u4.deb= ian.tar.xz Checksums-Sha256:=20 f1153e91212bdf60acf66cb62713ad4ed577f2e85f578a04df31a5619624c1e1 3271 gnutls= 28_3.8.9-3+deb13u4.dsc f0b9c7d182072f0bbdb281304686aa6e2bfd343dadefa432ec4dab4893e9841f 140880 gnut= ls28_3.8.9-3+deb13u4.debian.tar.xz Files:=20 7774b56b8516eeb053bb6fb808035c6b 3271 libs optional gnutls28_3.8.9-3+deb13u4= .dsc 38f664bc59e3bb4ad032ed55b09c6b97 140880 libs optional gnutls28_3.8.9-3+deb13= u4.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAmoAcdoACgkQpU8BhUOC FIQJDw//cvNX/dy1RBPcMf4wcBmkAc3FFA7BXMb7gvGfOpwmFui0v0bnnowNxd7Y VLYVmvBD4cJSDV9Vo8E1ZW9q+fNkrEdNGvH1xJ0onxmqlk5YnGpVPVvD00WX63z0 cFrl0wWGlcP+Xhp16XxfDt+f5zz9QVVcyAodinMiqck58FVVfpQpiNAZpL+fLjPF xei8Fa3n7jK+u+0PPR9oYHaD5vZ6IfQdoy8Ajk377J0l9+T1eMVnzLqYBW8oeNAL MWaM97at/CKRYIOTKR+xYPc7LeqIKTUyQYfcS/I0MbPN3veJjeHOhl1P/H9t/1P9 Iten6zX+25eQ5t10zrvdoNkSYPY5WFsGYdq9aSjn9mMr7gGVS+IKUelG+Ps7WS5o uMKGCL4YZbMIh75VRG4eploOGJU4TuKXL4ouvADZ6be2ibRicWxjxuw4lj2peqHU 9R/ZXK+pV90nkkGUj5Jwq2ul7XixuQgRDlzuyppC/1lad6X1fDf3wkSKWQNrb377 VlNqnwbZuWFbQ4w1PmkmlDRSFAKjxoQZvSdGkgyGoJ1CR9z7Jngxh0pUeHX6A1iG rqZPbq3/UMrDzKfFWAy7UqXT8XwuNFvHqpfcNI1brV8ezHK+nniwlcDXT185+89t HRU0Uqbf0/boMI9GyVnWQONsAoUuG0KFay4L1so79OBG5oW+ViU=3D =3DEpDD -----END PGP SIGNATURE----- --===============2036990032795251889== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCahDIJAAKCRCb9qggYcy5 IawIAP4zTBLbLDdDoOk1UpkDWVDAVWeQsJiqJFVw1PL1xMff9wD+IzDERQsS0Mhu SVpZBtaQiDv9hbbdmfkZVAirnRtNzQw= =muc/ -----END PGP SIGNATURE----- --===============2036990032795251889==-- ]