Bug#1140406: haskell-crypton-x509: do not enforce X.509 Name Constraints

[Janus Troelsen]

Package: haskell-crypton-x509
Version: 1.7.7
Severity: grave
Tags: security
Justification: user security hole
X-Debbugs-Cc: ysangkok at gmail.com, Debian Security Team <team at security.debian.org>

Dear Maintainer,

See
https://haskell.github.io/security-advisories/advisory/HSEC-2026-0008.html

-- System Information:
Debian Release: 13.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.90+deb13.1-amd64 (SMP w/24 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled