-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 09 Jul 2020 10:30:12 +0100 Source: fwupd Binary: libfwupd1 libdfu1 libebitdo1 fwupd fwupd-doc libfwupd-dev gir1.2-fwupd-1.0 libdfu-dev libebitdo-dev Architecture: source amd64 all Version: 0.7.4-2+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian EFI <debian-efi@lists.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: fwupd - Firmware update daemon fwupd-doc - Firmware update daemon documentation (HTML format) gir1.2-fwupd-1.0 - GObject introspection data for libfwupd libdfu-dev - development files for libdfu libdfu1 - Firmware update daemon library for DFU support libebitdo-dev - development files for libebitdo libebitdo1 - Firmware update daemon library for 0bitdo support libfwupd-dev - development files for libfwupd libfwupd1 - Firmware update daemon library Closes: 962517 Changes: fwupd (0.7.4-2+deb9u1) stretch-security; urgency=high . * CVE-2020-10759: Prevent a possible signature verification issue as the return value of gpgme_op_verify_result was not being checked. (Closes: #962517) Checksums-Sha1: 5f4d15b2a1614bd01777251df21bf6068b2bacec 3207 fwupd_0.7.4-2+deb9u1.dsc 7d1e1955c97dabb6465cfd3ff06726f09f8318ae 772290 fwupd_0.7.4.orig.tar.gz 2c2fb167a709803941a0a051479abdc6da4d760e 12056 fwupd_0.7.4-2+deb9u1.debian.tar.xz a9f634a93e125a401bc5e7681a19565d5987914a 315218 fwupd-dbgsym_0.7.4-2+deb9u1_amd64.deb a93143088ea6afc11fd98d67564bcee4b8d11cfe 48508 fwupd-doc_0.7.4-2+deb9u1_all.deb a48d3269cc617674c6348bfe09a3737f54a99521 17393 fwupd_0.7.4-2+deb9u1_amd64.buildinfo c732164caead2af611966320b73260ffd016d903 125474 fwupd_0.7.4-2+deb9u1_amd64.deb cbb8cf7c4b45b55eacf66728f43865b1bcb07b94 11250 gir1.2-fwupd-1.0_0.7.4-2+deb9u1_amd64.deb 34c7305c5c566001dc8c4260def157d953886b5d 22794 libdfu-dev_0.7.4-2+deb9u1_amd64.deb 7d06d17dfe606733a07795a278f32d5212ac3850 133864 libdfu1-dbgsym_0.7.4-2+deb9u1_amd64.deb 50af10a330a16b70877ef0e7180df0311b6d9aac 49910 libdfu1_0.7.4-2+deb9u1_amd64.deb fc5962a4c361cfaf1a3859e1bb20613292420152 8558 libebitdo-dev_0.7.4-2+deb9u1_amd64.deb a7c34d498d7a214e02a9b98a1595418a829a0378 18918 libebitdo1-dbgsym_0.7.4-2+deb9u1_amd64.deb eb5156056e8e41e7e8031451aefe3d27e1473895 13742 libebitdo1_0.7.4-2+deb9u1_amd64.deb d95bbca78148654ba0546352398554ca561f8fe4 17386 libfwupd-dev_0.7.4-2+deb9u1_amd64.deb 5c2cba109c128d3cda6f0bc184bb9c7c87a32abb 59792 libfwupd1-dbgsym_0.7.4-2+deb9u1_amd64.deb 0998246d30072095cbfef179b254c580cba06d79 29614 libfwupd1_0.7.4-2+deb9u1_amd64.deb Checksums-Sha256: e58262e4e08ff87403824845c73fd2d27285cbffbeabe8fcd4a450bcb4dbeddc 3207 fwupd_0.7.4-2+deb9u1.dsc 1a82206fc8801730b3d97327985f378ff11a0b519634796834e6fa2651b2a0e5 772290 fwupd_0.7.4.orig.tar.gz e4f1e6bea9eed83f0de661fe2a04501fee34849b0ce9932eea1da50509de145f 12056 fwupd_0.7.4-2+deb9u1.debian.tar.xz ea608bbc8c14addf49510b41f25eb9689587a19bd0c0cb5ec1d077467210335d 315218 fwupd-dbgsym_0.7.4-2+deb9u1_amd64.deb ac70353efc0d7724d604b9bf51e970e0e49fda3b157ceb3a1cc7948f280a9835 48508 fwupd-doc_0.7.4-2+deb9u1_all.deb ac99e00004276089a5d6bdbc1c84420462db818e8eeba512ab219e4715e5ab45 17393 fwupd_0.7.4-2+deb9u1_amd64.buildinfo a3969c466b72887d865ae4fd14b593e96f7aaa711262060993f7648d47d9763c 125474 fwupd_0.7.4-2+deb9u1_amd64.deb f9d1d2c56d42ce4d3947b65030633467d1404c00b66749ba8db6a2e86dec49c9 11250 gir1.2-fwupd-1.0_0.7.4-2+deb9u1_amd64.deb f1857488cf61072c9cc5d64f397324a5bc0301ac500ed1b64be2cbadd08cbc3e 22794 libdfu-dev_0.7.4-2+deb9u1_amd64.deb 451b96e645b5b41bb748ba97c653ce2b21664539d18afc8db810cda23223dd71 133864 libdfu1-dbgsym_0.7.4-2+deb9u1_amd64.deb 7d223ee10a9f9594420ec9d9d4784ae64678532bc2e422c5a45524ee9d00aac8 49910 libdfu1_0.7.4-2+deb9u1_amd64.deb 6e5a1790738e1c1428eaebae18d90daa316491aa55dd8762a17a3a8aa525f23e 8558 libebitdo-dev_0.7.4-2+deb9u1_amd64.deb 9575548c19b2b59bc877eaf2f20fae639838abd2ebd514fed4551a2b6ded7526 18918 libebitdo1-dbgsym_0.7.4-2+deb9u1_amd64.deb 5b232fd3a925ae61ec5df94642ed96ffa68f4f754cc24ce70a62c18d7cb096e0 13742 libebitdo1_0.7.4-2+deb9u1_amd64.deb 2db62d4db4ccf28f6cf5ce1868dcb4eb6978c8152f5fda8a30270af56c7c1eba 17386 libfwupd-dev_0.7.4-2+deb9u1_amd64.deb 5969a6421a09922e670fcaef3e7d70685eaa8773d7cf402951d933177694912b 59792 libfwupd1-dbgsym_0.7.4-2+deb9u1_amd64.deb e360332c2470623b5c69f63a67fc7d07d39940f36dc2102147767bf441503a21 29614 libfwupd1_0.7.4-2+deb9u1_amd64.deb Files: d35fa41d096a58df80d4d40e362abf8d 3207 admin optional fwupd_0.7.4-2+deb9u1.dsc 411b139fa77b912e0b4a2ca2f1b1189f 772290 admin optional fwupd_0.7.4.orig.tar.gz 2d782220d2f457af04affa081059ad3e 12056 admin optional fwupd_0.7.4-2+deb9u1.debian.tar.xz e379d39c1a07dd4c74f5a645c8613fb1 315218 debug extra fwupd-dbgsym_0.7.4-2+deb9u1_amd64.deb 40d622b9758e62e829782d2c66131d11 48508 doc optional fwupd-doc_0.7.4-2+deb9u1_all.deb 64c602128a6accf5830800eefe6c37a6 17393 admin optional fwupd_0.7.4-2+deb9u1_amd64.buildinfo 4c484eadef13571eedb252bfe2b475f1 125474 admin optional fwupd_0.7.4-2+deb9u1_amd64.deb 1bfbd04b18faab598922c833ba4bf575 11250 introspection optional gir1.2-fwupd-1.0_0.7.4-2+deb9u1_amd64.deb e8149459dcc952b4d563c199decbe0a2 22794 libdevel optional libdfu-dev_0.7.4-2+deb9u1_amd64.deb 6613b314e49c85694b91608ccba8a86e 133864 debug extra libdfu1-dbgsym_0.7.4-2+deb9u1_amd64.deb 5e3e59449ae39b22feb68b40bfc93013 49910 admin optional libdfu1_0.7.4-2+deb9u1_amd64.deb a5ec61eeb58ab9dd93b204752e03f596 8558 libdevel optional libebitdo-dev_0.7.4-2+deb9u1_amd64.deb 2309399769a96b4bfe620aac81b0887b 18918 debug extra libebitdo1-dbgsym_0.7.4-2+deb9u1_amd64.deb 293d25996d0ee3c4c4f6ec9ae6ae11cb 13742 admin optional libebitdo1_0.7.4-2+deb9u1_amd64.deb ae708fe893b7f9a439dd9a29a2601d26 17386 libdevel optional libfwupd-dev_0.7.4-2+deb9u1_amd64.deb 983d44e8f5ce0f2c6bc21e3d7eda21f2 59792 debug extra libfwupd1-dbgsym_0.7.4-2+deb9u1_amd64.deb 5064d83da57be5ac4ff72dcd00e4d070 29614 admin optional libfwupd1_0.7.4-2+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl8G5QkACgkQHpU+J9Qx HljOuhAAtZUeaoiBAAYPkAiZcin6ZBDEu8cHgtC6Hzl7HoqXvBH5ekTSrX3dQaUv Q7bvsAkce1hCfy3dfvpzZTRUoCBUSdeevPqkzBu4RZ4nq2Rh6saskTt8I93Lxolp zkATebtBHv7Civq3IdzG/i1EhUqyrMjbF/NUEe8pNxV6aEMuLZ4uxcNOfC+Z1jwc EZxS/J9jzEzXC2V907H8w8Yv+fUVAU+5b5l9zZQvUOhEn3KMFwBT60lSydxTk7rX ewaCLZqvf8DFFpJghYzi4S7PYQ0KqB4nzKO4bSoYKe1g7ygrTrgQgTu1vOrdFPAw i4xeRxgqF2u5gSczIWR4dTaZhux5BnmYk0FEN9+7lh6YQg3phkX1tlek0Xi1xy3i I52u4M3JCmRDstCj+Abg0LvFa4jSXWbhFurV5iKl/RxJuDuF7UDa7PCnxr6HCpDN vVnC9lGkeJ3+CS8PrCbtmGHycbiGRfl7oxYDY6UwTbnU+5XbxPR9hCp5s4fVxOPC 578+GPHXFF2gl/KclGLlsUGzZ0nImbuRRtOdjYw1gkf3uBiPxNxmIdW/8EFeguY6 Ye4X+QJw2QXzhWAfyOjctaSyZti+nUMyjwoEXD5ckvNBkxONIpETtMCCGIZBZg31 bvRZDjjb3mCPYZHgMODmeDAmjdxgm+Ws4Nxk2FIE5l5EAem8LQQ= =qfbT -----END PGP SIGNATURE-----