-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 29 Dec 2019 15:04:13 +0000 Source: libgcrypt20 Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20-dbg libgcrypt20 libgcrypt20-udeb libgcrypt11-dev Built-For-Profiles: nocheck Architecture: source all amd64 Version: 1.6.3-2+deb8u8 Distribution: jessie-security Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: libgcrypt11-dev - transitional libgcrypt11-dev package libgcrypt20 - LGPL Crypto library - runtime library libgcrypt20-dbg - LGPL Crypto library - debugger files libgcrypt20-dev - LGPL Crypto library - development files libgcrypt20-doc - LGPL Crypto library - documentation libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb) Changes: libgcrypt20 (1.6.3-2+deb8u8) jessie-security; urgency=high . * Update an incomplete patch to CVE-2019-13627 (mitigation against an ECDSA timing attack). Thanks to Albert Chin-A-Young <china@thewrittenword.com> for the report. Checksums-Sha1: 637f8fc7b106d4e7b323afca1620a2f9030f530f 2587 libgcrypt20_1.6.3-2+deb8u8.dsc 9456e7b64db9df8360a1407a38c8c958da80bbf1 2494052 libgcrypt20_1.6.3.orig.tar.bz2 f51282dfef381f4b80526bd959910e083bb19196 36572 libgcrypt20_1.6.3-2+deb8u8.debian.tar.xz 2c729dfe40d97862fd0cc08c38002abe0369af88 65576 libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u8_all.deb cac4ac510eae1a126e7607bebabf08215bd29928 679420 libgcrypt20-doc_1.6.3-2+deb8u8_all.deb dfb8f4c7dcd5526646d7e9823f8b54d3c67a9a9c 438980 libgcrypt20-dev_1.6.3-2+deb8u8_amd64.deb 199babe01ba5a9fb0e53a968f8a3932d06e12fd2 656974 libgcrypt20-dbg_1.6.3-2+deb8u8_amd64.deb 783373cedba5b6605e9daca26d82d1a014ea7abb 393534 libgcrypt20_1.6.3-2+deb8u8_amd64.deb 216d7dccee5fd9c96aecdc8ba7e760105eefbbf0 305832 libgcrypt20-udeb_1.6.3-2+deb8u8_amd64.udeb Checksums-Sha256: ea55179c07cf8938d197c81024dd3090c40d1bfbbc6b3dad13f2abb9b48f5eda 2587 libgcrypt20_1.6.3-2+deb8u8.dsc 41b4917b93ae34c6a0e2127378d7a4d66d805a2a86a09911d4f9bd871db7025f 2494052 libgcrypt20_1.6.3.orig.tar.bz2 fbaadf6c59fd0bbcfa7bd57329f00c94829cf1ab9b0f17699af30c469db03e76 36572 libgcrypt20_1.6.3-2+deb8u8.debian.tar.xz 590dec9fccddf1a91bd3336a6ec8ffb2d5b642bf5c74398f02510ca2da5cb9bb 65576 libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u8_all.deb 4ae353ca76f4a7dcdf9f00aaf42a5d768f5bff1327124131677ed5535c92d58c 679420 libgcrypt20-doc_1.6.3-2+deb8u8_all.deb 2a59bd45293b2ff0c283906fc193cee1fb2d0c177b893f8dcd8fd6d9aecc1bb6 438980 libgcrypt20-dev_1.6.3-2+deb8u8_amd64.deb 0fd7d2faeb21874e8a21587bfb8cafe1be53b62b30976dc38b30dc9e1cda276a 656974 libgcrypt20-dbg_1.6.3-2+deb8u8_amd64.deb 4279c417bcc4e9c75f2d4e9c87715dbac78dfd261ac463ce1dcb39ddb723c08e 393534 libgcrypt20_1.6.3-2+deb8u8_amd64.deb 9ad2218046564c0c1e1d9ffffdd6d2d29c0f17f6ae3f5b644b7a77980b98b9ba 305832 libgcrypt20-udeb_1.6.3-2+deb8u8_amd64.udeb Files: 8e0c6965279876b7f0b26b846b084784 2587 libs optional libgcrypt20_1.6.3-2+deb8u8.dsc 4262c3aadf837500756c2051a5c4ae5e 2494052 libs optional libgcrypt20_1.6.3.orig.tar.bz2 eb645efbc4cff1e67654b3217ec286af 36572 libs optional libgcrypt20_1.6.3-2+deb8u8.debian.tar.xz 2e529c3da4cf2eab0d3ad3410a16e93b 65576 oldlibs extra libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u8_all.deb 7c8283963c4f117f4c6eb048dbd50f3b 679420 doc optional libgcrypt20-doc_1.6.3-2+deb8u8_all.deb 52a58a2b7c5743dd02038e58cd1e25a8 438980 libdevel optional libgcrypt20-dev_1.6.3-2+deb8u8_amd64.deb ea8ef320dfef0143f8dc0d107df89567 656974 debug extra libgcrypt20-dbg_1.6.3-2+deb8u8_amd64.deb 0f3a267160da5eb92d447ae23742372c 393534 libs standard libgcrypt20_1.6.3-2+deb8u8_amd64.deb 08aab097dcdbf7c1b47b2f6f02c6d3bc 305832 debian-installer optional libgcrypt20-udeb_1.6.3-2+deb8u8_amd64.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl4Mkj0ACgkQHpU+J9Qx HlijdhAAqxnvHgZiMBfd0s/kqUgMEuts/qfca8hzogUNDjDS2VCMe8cJP6DlWJ3I Ykx/y/V06ny25X3eQDDEnLv5j+nSWJmsPn85mfh1V2U09dhX/5TrBGVeTeNxxwnN z2I6Rya0nNOOvnWCE4lWTNeNCApKvHM8zKK84lT+8/FSIo49QtjfVwS/3Ucvl3s6 1JgftUYaiUnrbrZ+SIepkOsFW8TT8gdaTim/ZoZberziCLlD+Ti/4dtJmt99dUGI lTOmvMoa2jHseBYUWO2YYKrWOEZXyJfPwaQGJOzSepDs1o8CCYcXX/J7PRQMIM+k QusY+84ph9H3poQPIbadaZLRYtuhgLyo+tBCeCH7AkGhXkHuTgUiB6tr/xGiaKZh duK6981jxIB2hWNnvdYZkIOcS92OrB7rKO5PgoHkefp8D6fFL0Zon2VaIzTjGmX9 dr5RCpg83j9LDGVfOTgwMlkSqStz1UuMO2zMcYinTlJwsxVH20Qk9DT/OapXca+Z tVoUrrtRlPRxBDeZaMKx3ggXfKI8An/xifGFaLtv4/fKxlnKsmtHlIb/Wgb2sVa/ BGc4yw6xe4vbgBN5Mm1UUQNgfRIhDxxkDVG/EQdxE/f3RfwcGOj/1AlGNkGhHpnc tb9n5rofUr0o9PYQz2xWPtUpQ/5jxNRO7G3c4t/VIyGgLYHZp+g= =SCUE -----END PGP SIGNATURE-----