-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 25 Sep 2019 14:18:36 +0100 Source: libgcrypt20 Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20-dbg libgcrypt20 libgcrypt20-udeb libgcrypt11-dev Architecture: source all amd64 Version: 1.6.3-2+deb8u7 Distribution: jessie-security Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: libgcrypt11-dev - transitional libgcrypt11-dev package libgcrypt20 - LGPL Crypto library - runtime library libgcrypt20-dbg - LGPL Crypto library - debugger files libgcrypt20-dev - LGPL Crypto library - development files libgcrypt20-doc - LGPL Crypto library - documentation libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb) Changes: libgcrypt20 (1.6.3-2+deb8u7) jessie-security; urgency=high . * Update patch to CVE-2019-13627 (mitigation against an ECDSA timing attack) to avoid FTBFS. Checksums-Sha1: 182e3c6e2a9acbcf3c92bb0cb29674c3624fd31d 2587 libgcrypt20_1.6.3-2+deb8u7.dsc 9456e7b64db9df8360a1407a38c8c958da80bbf1 2494052 libgcrypt20_1.6.3.orig.tar.bz2 5d09193245855fe8f6c7c140f0f5ba9b71596e16 36280 libgcrypt20_1.6.3-2+deb8u7.debian.tar.xz de15b0da685ae7a43d9935a994c1ba382acf9134 65478 libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u7_all.deb 6af3e4bdfcb05b38c7d504a9664f0cfb955eaa93 679336 libgcrypt20-doc_1.6.3-2+deb8u7_all.deb 2b4c7142bbe3675a1704d8607c53d96eee70cc21 438824 libgcrypt20-dev_1.6.3-2+deb8u7_amd64.deb c66f20274d4b6f0eaa048646702ac2994e178fee 656504 libgcrypt20-dbg_1.6.3-2+deb8u7_amd64.deb d418e6260f4f7a3a640ef58a91d0c9114e6e5ce4 393400 libgcrypt20_1.6.3-2+deb8u7_amd64.deb 26dd5494cf87bd88eae172e02c3abcd73f846c62 305860 libgcrypt20-udeb_1.6.3-2+deb8u7_amd64.udeb Checksums-Sha256: 19b70695823f679597b4a7f32c8b477b4872054ac12f6bd03ceb43c14d5e7f73 2587 libgcrypt20_1.6.3-2+deb8u7.dsc 41b4917b93ae34c6a0e2127378d7a4d66d805a2a86a09911d4f9bd871db7025f 2494052 libgcrypt20_1.6.3.orig.tar.bz2 2e328fa29871700207d2af9586f94c60770d784a8e93ba8dae39cf08fcafaf83 36280 libgcrypt20_1.6.3-2+deb8u7.debian.tar.xz daaa6e74a55c9275d632c5baf6c78a5a4d76b2adffcc120679c862cf4d1960bc 65478 libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u7_all.deb b16da4ff9ab74a3d6bc3f063fb99b6e2472759073ba684a4d8ff43b1019bcfc9 679336 libgcrypt20-doc_1.6.3-2+deb8u7_all.deb 2f5a0df8551698faac7814481f605cdbe12294d7db8b76846a47a8f324a7a93a 438824 libgcrypt20-dev_1.6.3-2+deb8u7_amd64.deb d36d5173806294a3e32b3c7651f5af119d05497e2f9d3cf03fd70760e7a9b043 656504 libgcrypt20-dbg_1.6.3-2+deb8u7_amd64.deb 41167b3c900a11b2ca329992ecb6ae2a0a35faaea9aef2e5584e32e13cfb2831 393400 libgcrypt20_1.6.3-2+deb8u7_amd64.deb 2b3e2ef63cd6caef3423fcefdb5d08021635016b24eff2673a2062cd7e508040 305860 libgcrypt20-udeb_1.6.3-2+deb8u7_amd64.udeb Files: 64161f8a13ae985a4d9dfe969745a885 2587 libs optional libgcrypt20_1.6.3-2+deb8u7.dsc 4262c3aadf837500756c2051a5c4ae5e 2494052 libs optional libgcrypt20_1.6.3.orig.tar.bz2 f62767e58d56da7d62540a8b9bdee16a 36280 libs optional libgcrypt20_1.6.3-2+deb8u7.debian.tar.xz f41f4090934d744f93f2d6011de8fad0 65478 oldlibs extra libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u7_all.deb 43dbad2297484694a3e777d8aef45f7a 679336 doc optional libgcrypt20-doc_1.6.3-2+deb8u7_all.deb 5863d6b95feaf3c8473cb77d45aa92c1 438824 libdevel optional libgcrypt20-dev_1.6.3-2+deb8u7_amd64.deb 4ce19fe6e677ec7915ad6ede0105fead 656504 debug extra libgcrypt20-dbg_1.6.3-2+deb8u7_amd64.deb ee9f2d946f3168f509170415dda8834c 393400 libs standard libgcrypt20_1.6.3-2+deb8u7_amd64.deb 734da2e3b4ff972020e6a0648a4aa399 305860 debian-installer optional libgcrypt20-udeb_1.6.3-2+deb8u7_amd64.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl2Lat0ACgkQHpU+J9Qx Hliu+xAArqZ7j8nfh+vOJmJXlUoII7iIw8gmALZkN0KQ4W3TH4MHsGPJBkTvVM1s i2wQY9+DMxpPIv8iRH6OdSvYrxRajLNhpw3Eqf32eJGC8F8abHi0+9obJ7kmUWDl JA7M9KizYwi0z4peHmC5LQcW7uskqqK0gOIktLHAk+uH+TotwUC/ZoULWyBJ4nS4 c8gX0y0H+Uqm9AulI0ZGwyqsV+PBcplIt1/fhhTAi8t3+6Plh5UHOBEm08vYrHM/ ynKnZw0wv8AxAcO76v5qIiayolb4J/67R70YVg6+SqYlBD7rrEesv1q6/vodyBam b1/rZEWZAkpwEfrx63PIC8qbP5vYbBt27wUtZehph/0r0aXQylbpTS+cJKYLId8c vDluBGE30Gayp60Ap93jjZWLWil7g3M7KfTV6ie0udNkwEPMBcFyGffo/aFIIu0o sS2JPA26Be5+gBs4ohVY3SxD36w9/7c9TJ1ZHtDLzY51mY+qbS8gkE8bT5JZFTGg aMizzsKPHH/RgR+iCcCwX+FQo7YOn7/JCZBs6u5vQqYFAlIaciTvXGMYzZvL7kf6 xF4bDzziDHJ3HkVFhuGmssfoVKkmo/YYZ5Vo5wAZyNcPkWIs1elGHJa7RrucLQ3u IDNnJI1DcnAMMsJisTSNFDcvG2MpMnc2sp8kUpOtlhq/1zZZn6U= =Cwrt -----END PGP SIGNATURE-----