-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 24 Sep 2019 16:18:55 +0100 Source: libgcrypt20 Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20-dbg libgcrypt20 libgcrypt20-udeb libgcrypt11-dev Built-For-Profiles: nocheck Architecture: source all amd64 Version: 1.6.3-2+deb8u6 Distribution: jessie-security Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: libgcrypt11-dev - transitional libgcrypt11-dev package libgcrypt20 - LGPL Crypto library - runtime library libgcrypt20-dbg - LGPL Crypto library - debugger files libgcrypt20-dev - LGPL Crypto library - development files libgcrypt20-doc - LGPL Crypto library - documentation libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb) Closes: 938938 Changes: libgcrypt20 (1.6.3-2+deb8u6) jessie-security; urgency=high . * CVE-2019-13627: Add mitigation against an ECDSA timing attack. (Closes: 938938) Checksums-Sha1: 05935fbee9900ada08319cdd1c46641bdc964c6a 2587 libgcrypt20_1.6.3-2+deb8u6.dsc 9456e7b64db9df8360a1407a38c8c958da80bbf1 2494052 libgcrypt20_1.6.3.orig.tar.bz2 a08c8949c0396a821972356e51d7cbbfe8ffac56 36888 libgcrypt20_1.6.3-2+deb8u6.debian.tar.xz 90d48c05c828ae794e4eab3aa22ca0d2a5e228f3 65450 libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u6_all.deb 82c89ff892217a704a73ea23775d3cd94523828c 679292 libgcrypt20-doc_1.6.3-2+deb8u6_all.deb f6a2f9786a3d1d5e6b4438687b0efe88ee06813a 438870 libgcrypt20-dev_1.6.3-2+deb8u6_amd64.deb 2dad86405bb0d16f567e0269d9bfc5a6572bcb1d 656784 libgcrypt20-dbg_1.6.3-2+deb8u6_amd64.deb d3141b53eefe209856dc12b36c2a53fcf67a963c 392454 libgcrypt20_1.6.3-2+deb8u6_amd64.deb 7866983bb2965cd583b97706f84064ce61be2c41 306244 libgcrypt20-udeb_1.6.3-2+deb8u6_amd64.udeb Checksums-Sha256: 8fbe77a2f3488a6a83949e09945315656ea329a549b53b26302411d3b573c637 2587 libgcrypt20_1.6.3-2+deb8u6.dsc 41b4917b93ae34c6a0e2127378d7a4d66d805a2a86a09911d4f9bd871db7025f 2494052 libgcrypt20_1.6.3.orig.tar.bz2 907a41d02e16c6f8aff7331a9874a7fcf6cb1d9adccad962fcf32d8845b0d425 36888 libgcrypt20_1.6.3-2+deb8u6.debian.tar.xz 273f789c2d000bf687bbec1310ad0c9ee99d74691fd7cbf7d08690a9ff02a6cc 65450 libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u6_all.deb 02cc263a9c1d7b48fcadfea72ff6cbaa7e1b4a4b7fe68bab89ec9414ae86072d 679292 libgcrypt20-doc_1.6.3-2+deb8u6_all.deb 836aeada8e88f76014ba4709da914fc756334251ba10bc019475aeec81809bd7 438870 libgcrypt20-dev_1.6.3-2+deb8u6_amd64.deb 0a3b90af42266f48273c30385f8bb9b9c02a042ea6d85108f7fb667073fac3bf 656784 libgcrypt20-dbg_1.6.3-2+deb8u6_amd64.deb 5a5cf8fe732b2016d57104cedd331384fb8741ae6c4397974f1fe5c13c05ca04 392454 libgcrypt20_1.6.3-2+deb8u6_amd64.deb 11687c8c5e012fee0eebb754643f395d3fee11dbc5d0ec4c636caeddf1971be8 306244 libgcrypt20-udeb_1.6.3-2+deb8u6_amd64.udeb Files: 95398b72e94632d9f39d03625978595a 2587 libs optional libgcrypt20_1.6.3-2+deb8u6.dsc 4262c3aadf837500756c2051a5c4ae5e 2494052 libs optional libgcrypt20_1.6.3.orig.tar.bz2 4f93bfc06ac808fa70393107309bfb13 36888 libs optional libgcrypt20_1.6.3-2+deb8u6.debian.tar.xz a60b84c5143c90e4da69d937d82c0a1f 65450 oldlibs extra libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u6_all.deb 7bbb6139a594c6dc1068ecf442eddbb8 679292 doc optional libgcrypt20-doc_1.6.3-2+deb8u6_all.deb 10b6ca0a6c2e167fa4d5a0ec3ffd8808 438870 libdevel optional libgcrypt20-dev_1.6.3-2+deb8u6_amd64.deb a1139be9594adfd5c8e6777b529717f6 656784 debug extra libgcrypt20-dbg_1.6.3-2+deb8u6_amd64.deb 7e2052d6bac52220109e8882b98b9896 392454 libs standard libgcrypt20_1.6.3-2+deb8u6_amd64.deb 5723ffde2862a3fa2f553d870e1a40be 306244 debian-installer optional libgcrypt20-udeb_1.6.3-2+deb8u6_amd64.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl2KOP0ACgkQHpU+J9Qx HljfIQ/9EoGnXFLae4nhM/CJszYQXo3O536YjCtgjfxs5BwlS7zK/Rs0V2ZUu9lS T/HRXovDIA81b3WfpbMt95vxb/Qi0OtSNAYVk7FnKbodd5GUBbxIorgqidjsWh1R eXpiiZGd8ETIXNa+Vam7yI/jMEpmAQlLmDB5lZyNkjsfqTIGIwqkCt1YJRv2j+Dp PPvCt7HXHQeW6Nd9bWJ5DPSy7AZwIT7Oy3puRVdFNtQKhnYVT0j6fvzfQvu8SjW9 WxMicqNArVf/sejI2dmH5lz2BdxJXL4FIkj42f857qu/WckXUCML464S7db9L3fw bSb72qO3GGeam64sgoiLose7nAx5UpsHqf1DFSa39O/QHQvoyJrkRpSZOHWBaRm/ Uqkna1hPfj+NPKitUnC+aydR5MOIT9nZBEVMArMpAQo8fXZ8qEhlJTLAUIqoPbKD cm9XphpzwirxZIS8DVo48YYyHq1Bh8DDUu6s5D327l7y8orl/Cv/FE2q1umaObY7 iBXJ6TUn+s1jGRGoAAptrhEzaVmZpiemNAj24C9fYJmxvXqLeaSeFevN7AeJBu5e eNo9fXNcnYH8Z14lmsqYmVKvQ694vCQNRwO1klRyfGUQkC1tmxUs03nqqwv5z2FS lBeJ6wyeFTDyzXFjjmfDWOj+hmBRXs5OSMw9NTsczGhxaCdOg7w= =yZ0J -----END PGP SIGNATURE-----