[ubuntu/resolute-proposed] gnutls28 3.8.12-2ubuntu1 (Accepted)

[Anshul Singh]

gnutls28 (3.8.12-2ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #213394). Remaining changes:
    - Enable CET.
    - d/patches/crypto-config.patch: also read configuration from
      /var/lib/crypto-config/profiles/current/gnutls.conf
    - Forcefully disable TLS 1.0 and 1.1 through /etc/gnutls/config.
    - Forcefully disable DTLS 0.9 and 1.0 through /etc/gnutls/config.
    - Set default priority string to only allow TLS1.2, DTLS1.2, and
      TLS1.3 with medium security profile (2048 RSA keys minimum, and
      similar).
   * Drop changes:
    - present upstream: debian/patches/CVE-2025-14831-*.patch
    - present upstream: debian/patches/CVE-2025-9820.patch

Date: Wed, 18 Feb 2026 20:39:01 +0000
Changed-By: Anshul Singh <anshul.singh at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Julian Andres Klode <julian.klode at canonical.com>
https://launchpad.net/ubuntu/+source/gnutls28/3.8.12-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 18 Feb 2026 20:39:01 +0000
Source: gnutls28
Built-For-Profiles: noudeb
Architecture: source
Version: 3.8.12-2ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Anshul Singh <anshul.singh at canonical.com>
Launchpad-Bugs-Fixed: 213394
Changes:
 gnutls28 (3.8.12-2ubuntu1) resolute; urgency=medium
 .
   * Merge with Debian unstable (LP: #213394). Remaining changes:
     - Enable CET.
     - d/patches/crypto-config.patch: also read configuration from
       /var/lib/crypto-config/profiles/current/gnutls.conf
     - Forcefully disable TLS 1.0 and 1.1 through /etc/gnutls/config.
     - Forcefully disable DTLS 0.9 and 1.0 through /etc/gnutls/config.
     - Set default priority string to only allow TLS1.2, DTLS1.2, and
       TLS1.3 with medium security profile (2048 RSA keys minimum, and
       similar).
    * Drop changes:
     - present upstream: debian/patches/CVE-2025-14831-*.patch
     - present upstream: debian/patches/CVE-2025-9820.patch
Checksums-Sha1:
 61ba786c5ef1bfa0fcdca899f40bfdf23b7d6b70 3377 gnutls28_3.8.12-2ubuntu1.dsc
 d0bc40f70507922f632658f8991328c917ce6729 6949604 gnutls28_3.8.12.orig.tar.xz
 fc49ce4fce4d4cf55c13b73b8f290485ba85771e 996 gnutls28_3.8.12.orig.tar.xz.asc
 084976c714b9dfd8415a8fd63671d30709274115 178684 gnutls28_3.8.12-2ubuntu1.debian.tar.xz
 64e8919708301e621e30a8dcecc4e0627df94039 7310 gnutls28_3.8.12-2ubuntu1_source.buildinfo
Checksums-Sha256:
 17e64eadcea99e3761d6f9cfee7826884c09358467fd5481a38eed39e6fd0d58 3377 gnutls28_3.8.12-2ubuntu1.dsc
 a7b341421bfd459acf7a374ca4af3b9e06608dcd7bd792b2bf470bea012b8e51 6949604 gnutls28_3.8.12.orig.tar.xz
 7a70d4071502974666f2f661e4ab06ba06076efd20468e4198f5f09c7ace41e2 996 gnutls28_3.8.12.orig.tar.xz.asc
 1195e9d15f88983a385b3b0f43531f7f4c7df70cf9718a3f84dd707baf916087 178684 gnutls28_3.8.12-2ubuntu1.debian.tar.xz
 e615e8c29b87f71c20abd349a8edcd0bd561122b817dd044a950ed3d4de6b5df 7310 gnutls28_3.8.12-2ubuntu1_source.buildinfo
Files:
 3192f0ee680f04bc0bea1718c021a3ca 3377 libs optional gnutls28_3.8.12-2ubuntu1.dsc
 df129bed331c18381991b5b8f36b7070 6949604 libs optional gnutls28_3.8.12.orig.tar.xz
 973bda9c4d8294d0526f4900499b25bb 996 libs optional gnutls28_3.8.12.orig.tar.xz.asc
 3dc7d5928ae6a2a5fccb2d950b9b4ddd 178684 libs optional gnutls28_3.8.12-2ubuntu1.debian.tar.xz
 87abafb1d11a8b83f3b59d10a2ea3aba 7310 libs optional gnutls28_3.8.12-2ubuntu1_source.buildinfo
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>
Vcs-Git: https://git.launchpad.net/~juliank/ubuntu/+source/gnutls28 --changes-option=-DVcs-Git-Ref=refs/heads/debian/sid --changes-option=-DVcs-Git-Commit=0f864e9a31b4021c01ecd66c94616b165539acb2