Accepted gnutls28 3.6.7-4+deb10u10 (source) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 18 Feb 2023 15:37:28 CET
Source: gnutls28
Architecture: source
Version: 3.6.7-4+deb10u10
Distribution: buster-security
Urgency: high
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
5cfc04164a2ae5aaa3299636fb629c18b1ac61cd 3265 gnutls28_3.6.7-4+deb10u10.dsc
6165e7301c450a13bb693f0f7ef4e0ac4c21847f 102420 gnutls28_3.6.7-4+deb10u10.debian.tar.xz
2bd36f0c72af1154c7c87d4f1b2bc42212ddd13c 11570 gnutls28_3.6.7-4+deb10u10_amd64.buildinfo
Checksums-Sha256:
12f471baebedb368b8ea0c85cfecdf16b4c2bb5b0ed191587fce28424d6ff46e 3265 gnutls28_3.6.7-4+deb10u10.dsc
7f2bfec4727b90b7d81267098f997bf847494c0c9ff2906606398a40a730ec7f 102420 gnutls28_3.6.7-4+deb10u10.debian.tar.xz
fcabb40dae4097b5777585162ba867accb415416b70d52fbffda4828a4aaa0bd 11570 gnutls28_3.6.7-4+deb10u10_amd64.buildinfo
Changes:
gnutls28 (3.6.7-4+deb10u10) buster-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2023-0361:
Hubert Kario discovered a timing side channel in the RSA decryption
implementation of the GNU TLS library.
Files:
104fcbb8b95469867db7f61e520a16e7 3265 libs optional gnutls28_3.6.7-4+deb10u10.dsc
3e92b06d3947507129abe06117ad6b71 102420 libs optional gnutls28_3.6.7-4+deb10u10.debian.tar.xz
592af1a6fb43cfc35f1239fd2b0341f3 11570 libs optional gnutls28_3.6.7-4+deb10u10_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=av1y
-----END PGP SIGNATURE-----
Reply to: