gnutls28_3.6.7-4+deb10u3_sourceonly.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Mapping stable-security to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2020 21:31:50 +0200
Source: gnutls28
Architecture: source
Version: 3.6.7-4+deb10u3
Distribution: buster-security
Urgency: high
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil at debian.org>
Closes: 955556
Changes:
 gnutls28 (3.6.7-4+deb10u3) buster-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * GNUTLS-SA-2020-03-31: dtls client hello: fix zeroed random
     (CVE-2020-11501)
     Fix a DTLS-protocol regression (caused by TLS1.3 support), since
     3.6.3. The DTLS client would not contribute any randomness to the
     DTLS negotiation, breaking the security guarantees of the DTLS
     protocol. (Closes: #955556)
Checksums-Sha1: 
 a48299072fa967371a1f547d47f161f797f17926 3509 gnutls28_3.6.7-4+deb10u3.dsc
 71f73b9829e44c947bb668b25b8b2e594a065345 8153728 gnutls28_3.6.7.orig.tar.xz
 5911d8f00c70e65d27f8d5244c37ae3b04b6cae7 534 gnutls28_3.6.7.orig.tar.xz.asc
 625fc3e603d450eae1df163efac45d193f4eb4db 77948 gnutls28_3.6.7-4+deb10u3.debian.tar.xz
Checksums-Sha256: 
 a5acd2ff3e275baabbe42f949f9ce365e9fd53ea4a14a306be395dae2a7589d5 3509 gnutls28_3.6.7-4+deb10u3.dsc
 5b3409ad5aaf239808730d1ee12fdcd148c0be00262c7edf157af655a8a188e2 8153728 gnutls28_3.6.7.orig.tar.xz
 a14d0a7b9295b65ae797a70f8e765024a2e363dca03d008bfce0aec2b3f292b0 534 gnutls28_3.6.7.orig.tar.xz.asc
 cd03a0f7f16b7bdff8b7ecd0ebccd6c51b2ba6615df88de4a63a87bd47a8998e 77948 gnutls28_3.6.7-4+deb10u3.debian.tar.xz
Files: 
 fc6bb5a1516962ce8c85ba7e6040d105 3509 libs optional gnutls28_3.6.7-4+deb10u3.dsc
 c4ac669c500df939d4fbfea722367929 8153728 libs optional gnutls28_3.6.7.orig.tar.xz
 13b4d4d680c451c29129191ae9250529 534 libs optional gnutls28_3.6.7.orig.tar.xz.asc
 7c92fc403d229f57df9694ff5695dd0e 77948 libs optional gnutls28_3.6.7-4+deb10u3.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=vYBx
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.