Format: 1.8 Date: Fri, 12 Apr 2024 09:56:37 -0400 Source: gnutls28 Binary: gnutls-bin guile-gnutls libgnutls-dane0 libgnutls-openssl27 libgnutls28-dev libgnutls30 libgnutlsxx28 Architecture: i386 i386_translations Version: 3.6.13-2ubuntu1.11 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gnutls-bin - GNU TLS library - commandline utilities guile-gnutls - GNU TLS library - GNU Guile bindings libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutlsxx28 - GNU TLS library - C++ runtime library Changes: gnutls28 (3.6.13-2ubuntu1.11) focal-security; urgency=medium . * SECURITY UPDATE: side-channel leak via Minerva attack - debian/patches/CVE-2024-28834.patch: avoid normalization of mpz_t in deterministic ECDSA in lib/nettle/int/dsa-compute-k.c, lib/nettle/int/dsa-compute-k.h, lib/nettle/int/ecdsa-compute-k.c, lib/nettle/int/ecdsa-compute-k.h, lib/nettle/pk.c, tests/sign-verify-deterministic.c. - CVE-2024-28834 Checksums-Sha1: ae0224175c130c7994ceeced5d880d9fac8142a9 728732 gnutls-bin-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 3a8dab226b0ad25f14751dafeac880a173e80e45 280560 gnutls-bin_3.6.13-2ubuntu1.11_i386.deb 527246b09816a41c88b6e72af597db7ef1de6b62 10797 gnutls28_3.6.13-2ubuntu1.11_i386.buildinfo a15e438fb644dae2d2dd0e5ac301c04f3959d155 323544 gnutls28_3.6.13-2ubuntu1.11_i386_translations.tar.gz c6185a9544e8da5f98f78dd9273b4616eeb2c1aa 226156 guile-gnutls-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 0d1680b81512d04929bf0cdfff9468ab664575d9 85720 guile-gnutls_3.6.13-2ubuntu1.11_i386.deb 836e17f4ea591499c0524d0043b0f977b3d5c792 59900 libgnutls-dane0-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb ac15f06ecfed4d43d86a74703fbed3f20a592d24 29900 libgnutls-dane0_3.6.13-2ubuntu1.11_i386.deb 50c4a146db6809c2f5b99ee50939cb97e4018eca 60080 libgnutls-openssl27-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 9e6bc7fda6dcd3fd6e74758b90d634861bc4e156 30720 libgnutls-openssl27_3.6.13-2ubuntu1.11_i386.deb 555be88302846863dc4dcdc60d5b0155fe9a001c 938328 libgnutls28-dev_3.6.13-2ubuntu1.11_i386.deb fd08b633d7b4eb5158086d93ce03dfdc27afb3e0 1627996 libgnutls30-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb b86948a163404427e64b747ee5187f5bdb734b4a 837084 libgnutls30_3.6.13-2ubuntu1.11_i386.deb e7833a9a08de5e5c40edfc1ac013d64a98e7b82e 45140 libgnutlsxx28-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb e71df960661d36a0169500a89c60c0f09c60dc3a 15380 libgnutlsxx28_3.6.13-2ubuntu1.11_i386.deb Checksums-Sha256: afa98791c70ef69960e085c27196dfe42fb9a2e1713eb2e1828061232946a1dd 728732 gnutls-bin-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 6c52adde447c29ff5b59d229569364bb274e0964ca0b58a7fcd9f25d70f0b03e 280560 gnutls-bin_3.6.13-2ubuntu1.11_i386.deb 5dd046406c11ba01b618ea14a0b6b1ed4ee15635b67020bb7bcf8397def6b195 10797 gnutls28_3.6.13-2ubuntu1.11_i386.buildinfo d4754e0139b0c65c7b04a79cda34f8c1c0a112e82f57409b0fa451d5ec2a5a4a 323544 gnutls28_3.6.13-2ubuntu1.11_i386_translations.tar.gz 3316ac5f39664237585cadd8114916c15dee46ff300f21d53d8201e74d9fb213 226156 guile-gnutls-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb ba023a67cbeb9e470d120f542177a2ead272a74b5f28ecf6e5e1db63eaacdb9f 85720 guile-gnutls_3.6.13-2ubuntu1.11_i386.deb 524e776f5a8c3188145ac5a23a47e7f3b6e12e831a5a0629c6346dbdfcd27de9 59900 libgnutls-dane0-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 660e03fb4775c7722e28b028cb007da5aa5fb849c8eb4576b740ffaa33c03782 29900 libgnutls-dane0_3.6.13-2ubuntu1.11_i386.deb 280ecd2c3868b2d65ee23bc0018ad0e98b1a73acfc15d9525a7e3afc3140ed83 60080 libgnutls-openssl27-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 31c8fb15e5e9334a77df06bbe4d4c1261e9931c6ef98f125b25804a9745c705e 30720 libgnutls-openssl27_3.6.13-2ubuntu1.11_i386.deb 70b45d3b358fb780e657e8b966a9798fb3188891032ea2dcb1663574fdf51227 938328 libgnutls28-dev_3.6.13-2ubuntu1.11_i386.deb 960a2cd8199cc413bd0b278a13c8884aa8304a5017df21bc7bc6c16b3bdf6758 1627996 libgnutls30-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 3db5719f7217b2401a21afc8e2a818052579c20a5a468244927768cee6e11856 837084 libgnutls30_3.6.13-2ubuntu1.11_i386.deb 88c462da6a2d5148071506808db461acac0a1e8f3ba0da46490368be11888ec2 45140 libgnutlsxx28-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 6e5ead04cd900729605b26d762e2f9d213926505f44c21ff797adf11d5d801f7 15380 libgnutlsxx28_3.6.13-2ubuntu1.11_i386.deb Files: d26cd446e321214a6a7487807101635a 728732 debug optional gnutls-bin-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 7141dbe8358ac1b0d3223ffc8efd2cf3 280560 net optional gnutls-bin_3.6.13-2ubuntu1.11_i386.deb 58a6cc6f6be796a8e09ed57471121254 10797 libs optional gnutls28_3.6.13-2ubuntu1.11_i386.buildinfo 4e4e2bd6c2d75d6016a651f8770ff8ba 323544 raw-translations - gnutls28_3.6.13-2ubuntu1.11_i386_translations.tar.gz e79a2f66f8efe5290f04446b337aebeb 226156 debug optional guile-gnutls-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 29e84c3f23074d4ba83d81a4d7379025 85720 lisp optional guile-gnutls_3.6.13-2ubuntu1.11_i386.deb 0567ebe6602dcfb2407ddc516e4acd84 59900 debug optional libgnutls-dane0-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb dd726fb76b1ecfbc8ea65a321006ecaf 29900 libs optional libgnutls-dane0_3.6.13-2ubuntu1.11_i386.deb fd085f96306a79b23bba480820cf446c 60080 debug optional libgnutls-openssl27-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb cfd537a2b48f50c2a82ebd27efe27753 30720 libs optional libgnutls-openssl27_3.6.13-2ubuntu1.11_i386.deb 1a919217bc4ca9316bcf2444798c3953 938328 libdevel optional libgnutls28-dev_3.6.13-2ubuntu1.11_i386.deb b495a376ad91158a35050ad069c95e36 1627996 debug optional libgnutls30-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb 17fe65908320cd9d56314226abc00b2e 837084 libs optional libgnutls30_3.6.13-2ubuntu1.11_i386.deb 5878663c38dd4b24dee047a21c4aa491 45140 debug optional libgnutlsxx28-dbgsym_3.6.13-2ubuntu1.11_i386.ddeb a456e4b3a6a31623d4ede34a37440ebc 15380 libs optional libgnutlsxx28_3.6.13-2ubuntu1.11_i386.deb Original-Maintainer: Debian GnuTLS Maintainers