-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Jan 2024 07:56:15 +0100 Source: gnutls28 Binary: gnutls-doc Architecture: all Version: 3.7.1-5+deb11u5 Distribution: bullseye Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andreas Metzler Description: gnutls-doc - GNU TLS library - documentation and examples Closes: 1061045 1061046 Changes: gnutls28 (3.7.1-5+deb11u5) bullseye; urgency=medium . * Cherrypick two CVE fixes from 3.8.3: Fix assertion failure when verifying a certificate chain with a cycle of cross signatures. CVE-2024-0567 GNUTLS-SA-2024-01-09 Closes: #1061045 Fix more timing side-channel inside RSA-PSK key exchange. CVE-2024-0553 GNUTLS-SA-2024-01-14 Closes: #1061046 Checksums-Sha1: af213f31e286782f4703705e23f4c81bdeae68dd 4565936 gnutls-doc_3.7.1-5+deb11u5_all.deb eff59665aafc1366f25a1e4441bb071d64d1b572 9745 gnutls28_3.7.1-5+deb11u5_all-buildd.buildinfo Checksums-Sha256: 77aed83c4cdb216e4d59c7f937ebeab30a1b2220a64090342ee61891de1ae23a 4565936 gnutls-doc_3.7.1-5+deb11u5_all.deb 477cbfaed8291b3450d5d80e3f37240f448ecfd414845c75d044f2569ff22b91 9745 gnutls28_3.7.1-5+deb11u5_all-buildd.buildinfo Files: 71860bee14b81f8979a51dcae3ec9c33 4565936 doc optional gnutls-doc_3.7.1-5+deb11u5_all.deb 19310cf88c8546afd520331854c89195 9745 libs optional gnutls28_3.7.1-5+deb11u5_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgdRoRGwEM09wlaMzOni7ZmUpKEcFAmYMdeUACgkQOni7ZmUp KEeOtw/6AmS0RjdxEAWOlMf7RsaaeTRW60sOyQoL1wi4s1jC3wzwFc35byIqcOS7 bcS91067RPhnQm8WC7rGjSPkgYhEmS2Jbqme99jJ6ARQ6oCFkYqCvMASsQI5N6iu E5arDbUHpXWIWL162nhUVntas9GhOFS/be47bz7/SF1k89w7u9hEVppETkfhTmA0 tR4W3WXTJYlJ6D89J8jdT+n42PxKFnflc/bL47GC27jV5xA13TX85+d9AU58toDj YkHmzqJSu/AZanAkvCQ5uTrrzZSp//PQinVNXDcn+t6DCC9ONDz7JW/27orzOWL0 Oq8rh1+nv7Kt3jfuFgTCOIXH2ADeJAkOWA2u3wjAhy2M00JRgvLMstBcT3n1zjs5 Is32tthYncFkNTcO2irNNpSqkon7yE8JRfu9HO7Rd/KONTjYWXHhwBOLirpm+2aZ PX2LsICX0DeBB0VAHOfjykKA6hY+OzgxFLxj4/aFNNlAyCQH997cb3iHWWA5wULW MZbIZzM27googzFcW9yU5uCWqKYVNzGDrg8XZyyiFzp68xfRtHfBByYqMZxLg5b9 CAS1eUNbzk34V+5qKF4rF5yVa/5PEvoq8kiYInTJjxd6QuzQ/ES6d9WGp/z/+tTc oE3uTD+WN+G/Yhj078O5R0jkMt5FRw7LJGQawTHDTYmJcMp3xaw= =NjQx -----END PGP SIGNATURE-----