-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Apr 2017 20:44:53 +0200 Source: bouncycastle Binary: libbcprov-java libbcprov-java-doc libbcmail-java libbcmail-java-doc libbcpkix-java libbcpkix-java-doc libbcpg-java libbcpg-java-doc Architecture: source all Version: 1.49+dfsg-3+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: libbcmail-java - Bouncy Castle generators/processors for S/MIME and CMS libbcmail-java-doc - Bouncy Castle generators/processors for S/MIME and CMS (Documenta libbcpg-java - Bouncy Castle generators/processors for OpenPGP libbcpg-java-doc - Bouncy Castle generators/processors for OpenPGP (Documentation) libbcpkix-java - Bouncy Castle Java API for PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, libbcpkix-java-doc - Bouncy Castle Java API for PKIX, CMS, EAC, TSP, PKCS... (Document libbcprov-java - Bouncy Castle Java Cryptographic Service Provider libbcprov-java-doc - Bouncy Castle Java Cryptographic Service Provider (Documentation) Changes: bouncycastle (1.49+dfsg-3+deb8u2) jessie-security; urgency=high . * Team upload. * Fix CVE-2015-6644: An information disclosure vulnerability was discovered in Bouncy Castle, a Java library which consists of various cryptographic algorithms. The Galois/Counter mode (GCM) implementation was missing a boundary check that could enable a local application to gain access to user's private information. Checksums-Sha1: badffcd5d7fc1d6623166aa5d57f9a0be6c50335 2759 bouncycastle_1.49+dfsg-3+deb8u2.dsc c66140eea718b8a8c0616a3350c9385485bb65a5 21448 bouncycastle_1.49+dfsg-3+deb8u2.debian.tar.xz e5e32b784a11867463cf488b45bfba4acd8a7882 2002090 libbcprov-java_1.49+dfsg-3+deb8u2_all.deb e60bf6ff6f15a5c9f1d8cf9eb1baf8674eacdef1 80390 libbcprov-java-doc_1.49+dfsg-3+deb8u2_all.deb 0ca3578ba329d9d5914d1d56247e1e60f73b4766 115874 libbcmail-java_1.49+dfsg-3+deb8u2_all.deb 4fc31f482262ee2aad0b958ea39a4f3404173f71 97380 libbcmail-java-doc_1.49+dfsg-3+deb8u2_all.deb b7bc83df8449e004817d2f076eb6a5071de857ad 532720 libbcpkix-java_1.49+dfsg-3+deb8u2_all.deb 25dab5af5799364b8212a77561532005150def48 324578 libbcpkix-java-doc_1.49+dfsg-3+deb8u2_all.deb c279b63d64230d35fe8edb0e3119253f76aaef0f 234002 libbcpg-java_1.49+dfsg-3+deb8u2_all.deb 62e421e39619bd6d6e2b8557a9d7c9a16e5840da 34790 libbcpg-java-doc_1.49+dfsg-3+deb8u2_all.deb Checksums-Sha256: 84d2f83eda06a142aae39f3030dfc563a9f02729e64754fbb0349852399ab8d9 2759 bouncycastle_1.49+dfsg-3+deb8u2.dsc a3e7418968690ea10f3c8a1bd29145a2f259e4703db7d717e607013ac456785c 21448 bouncycastle_1.49+dfsg-3+deb8u2.debian.tar.xz 3b312287fd83961cbeaaf26a8f6e281f1d9d1e00bfcc93a0b6405e6c4bc31cf5 2002090 libbcprov-java_1.49+dfsg-3+deb8u2_all.deb 29ce383182c72612d215f887fdd3a8495c1f7cdb32196c72b922e7d2b2f11ef1 80390 libbcprov-java-doc_1.49+dfsg-3+deb8u2_all.deb e6fbc5464c88f1f524b5cf69237e44a0e5b20af6c6832408a02bcec9ac801463 115874 libbcmail-java_1.49+dfsg-3+deb8u2_all.deb 0a231d29d815c212ca338b7dc4127efd9b1f381ca28db3656dd801a151149063 97380 libbcmail-java-doc_1.49+dfsg-3+deb8u2_all.deb b2e7690bc6815cadd0d98540e3c02e967c059df835f08d4a5932f3cecd93fbab 532720 libbcpkix-java_1.49+dfsg-3+deb8u2_all.deb bc3b0c83fe5f6872e6d69b7e383a9470b10a2b76f2fb60ab166299af51286b4c 324578 libbcpkix-java-doc_1.49+dfsg-3+deb8u2_all.deb 31281903114fba7db2d3f5a1b5ed672f02af9ef94654b80d8b2a0a1cc4d9d86b 234002 libbcpg-java_1.49+dfsg-3+deb8u2_all.deb b6f3679808539bbe4a94d61811a3c6aeae258aad68cbd9656811d932d3526035 34790 libbcpg-java-doc_1.49+dfsg-3+deb8u2_all.deb Files: f1effbdf210cbebaaa48cf08e2b5f229 2759 java optional bouncycastle_1.49+dfsg-3+deb8u2.dsc bdc302bc695823864a9acaef46bdb4f8 21448 java optional bouncycastle_1.49+dfsg-3+deb8u2.debian.tar.xz 758e1ef7d0b0fe285d4f76a54852d0ea 2002090 java optional libbcprov-java_1.49+dfsg-3+deb8u2_all.deb 1f65fda81b6f1bef712c9cc1f8d05f74 80390 doc optional libbcprov-java-doc_1.49+dfsg-3+deb8u2_all.deb 56c1034a353226807a709024cd8f778c 115874 java optional libbcmail-java_1.49+dfsg-3+deb8u2_all.deb 5c023839e5d4691add5388c7d110d9de 97380 doc optional libbcmail-java-doc_1.49+dfsg-3+deb8u2_all.deb ada5c1c52b9ac21f39d86ae384a3bb8d 532720 java optional libbcpkix-java_1.49+dfsg-3+deb8u2_all.deb 0181bd0687950620315ad05e54ceab54 324578 doc optional libbcpkix-java-doc_1.49+dfsg-3+deb8u2_all.deb 5948436ed8d7f30bd7275e9216c19399 234002 java optional libbcpg-java_1.49+dfsg-3+deb8u2_all.deb d58d297b24f714a5d638ac78fc1c1b8c 34790 doc optional libbcpg-java-doc_1.49+dfsg-3+deb8u2_all.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAljr8RJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hkf00P/Aj3cnH3P6dfXN2aTaMHteZyEukkfqgyXhCI Qqf7Hh1ICZ4M2TenOpaons9+ibr56qBc2ti58N04SAvwYgxZMiwyTbmHu6fSrNwa 8FpX0qoWsKWliaamKvS0yd6oCytTd5wAL4j9xTtJDo1WQSRe36YjA18LEftQURRT 5Y+jeIMuc7Lm9BZ+/qQqJlGivos1bGicpz2sZemegGulEKmjoUewb8KAI7r5qI06 TcYcJgqo5zt63dimzEj/oNkm/Sc7CRp0R7VgX7cItm4rPTYGYfTUJyotcj5xYLc9 QMUCM+e05B/hCJgmWYp0w0+RNw1Oq/43sl9BYdnmmUwqYRRMeovFsie+eSvMa1MW xaMIfjIsLUA7bcN/QXB4MpvW1eqmdysjVZPCXBthWfFgBnBDRxto9k97iIG1HbOT BhPY639fzJxV7baLi/pC6wOZYj2E8qgbl7wORN/dgFYE9Ntiev6nP03DSueoWDgF 6F0FvSlL8H9OA+033eCNVZDKzRoseTudElwHPgbFPA3Ul+6uOQyBG7RQosXsKCoV QAEe+5mI5HbuSWq19nRrvr26bTEwW8dQnTJR0pPLF9PY7/BqHBz0LtuDVbNRRZWe LQ/JIW++ov5eosY2+EV+WnLkPvUptg2Q7OiEFijZUF7jpjxGVoT/Y/vtvhWM+O/C nT/Rc+xM =qz69 -----END PGP SIGNATURE-----