-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 05 Nov 2020 10:44:12 +0000 Source: bouncycastle Binary: libbcprov-java libbcprov-java-doc libbcmail-java libbcmail-java-doc libbcpkix-java libbcpkix-java-doc libbcpg-java libbcpg-java-doc Architecture: source all Version: 1.56-1+deb9u3 Distribution: stretch-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: libbcmail-java - Bouncy Castle generators/processors for S/MIME and CMS libbcmail-java-doc - Bouncy Castle generators/processors for S/MIME and CMS (Documenta libbcpg-java - Bouncy Castle generators/processors for OpenPGP libbcpg-java-doc - Bouncy Castle generators/processors for OpenPGP (Documentation) libbcpkix-java - Bouncy Castle Java API for PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, libbcpkix-java-doc - Bouncy Castle Java API for PKIX, CMS, EAC, TSP, PKCS... (Document libbcprov-java - Bouncy Castle Java Cryptographic Service Provider libbcprov-java-doc - Bouncy Castle Java Cryptographic Service Provider (Documentation) Changes: bouncycastle (1.56-1+deb9u3) stretch-security; urgency=high . * CVE-2020-26939: Prevent an issue where attackers can obtain sensitive information due to observable differences in behaviour to invalid inputs. Checksums-Sha1: 638db3415bbe0aca9ae899293863e55858222caa 2566 bouncycastle_1.56-1+deb9u3.dsc ccc81e2532eccb0eb0ad2937ba2383b5a286fd6d 10191556 bouncycastle_1.56.orig.tar.xz 7eda58dc2c67b1c49e1b00a2eec0d19c9c612218 11820 bouncycastle_1.56-1+deb9u3.debian.tar.xz 24ee162f092cf1da6181af13c5dde84c174da5ab 13459 bouncycastle_1.56-1+deb9u3_amd64.buildinfo 861c7abf8f6df796be1edd1842741c4b0af42bcd 97686 libbcmail-java-doc_1.56-1+deb9u3_all.deb f5d5b7262c1ee10f3b494d760eaf4748f2ad0814 152338 libbcmail-java_1.56-1+deb9u3_all.deb 1deaa301338fdda012d4db35d3c5ce20d395f4d5 186190 libbcpg-java-doc_1.56-1+deb9u3_all.deb 8a774cd0ba711c4d5443ab54dbc50541b91daf32 351556 libbcpg-java_1.56-1+deb9u3_all.deb bc58427cfad89383cb84a712fa63608b730b99d2 339148 libbcpkix-java-doc_1.56-1+deb9u3_all.deb 4e7f051be3ca693c8e6514b5574d88ab7f89651b 714542 libbcpkix-java_1.56-1+deb9u3_all.deb 0733dc2cc2e56823ec46b5f92f231bf9eeb8ff49 1934652 libbcprov-java-doc_1.56-1+deb9u3_all.deb 18eb02362cb17c8300fd77c8e39bc7bb81d61626 3637070 libbcprov-java_1.56-1+deb9u3_all.deb Checksums-Sha256: 713e28a0011e04c72fc3721be8d649a5d9ae11378a4440cbd0f3aad5eda34b02 2566 bouncycastle_1.56-1+deb9u3.dsc fbb69098b2d68952833e0b9890ef01b1ecefa2a62641a5bc0adc407f7676cd7a 10191556 bouncycastle_1.56.orig.tar.xz 73fa48c8ee0ef68fd080b0abf60c2e4957c16870ad8c408dd1f6b834bbe39324 11820 bouncycastle_1.56-1+deb9u3.debian.tar.xz 8bc3301ad9477e5822507359447cb7a4e5d24f41e0efa08a50ecc42db7cec1d7 13459 bouncycastle_1.56-1+deb9u3_amd64.buildinfo b199fafa6f59cbc5fb7ff69aa825cd84890219a370ed026257fe698cf378d6d5 97686 libbcmail-java-doc_1.56-1+deb9u3_all.deb 1cefbbcd06718c37ea047cdc14a8d8142adb773b9d24c9da06c652291eee8538 152338 libbcmail-java_1.56-1+deb9u3_all.deb e302b81b7ed6b19444f30d13989a04ddee401ff7e9aaaa64924f60f4baaa3214 186190 libbcpg-java-doc_1.56-1+deb9u3_all.deb c810e2e782d7e323682215e8e0f0b9e376b8eb3da453536b8fe93eb0ae0ae873 351556 libbcpg-java_1.56-1+deb9u3_all.deb e712d8b70e562eb5ff80f9d836bb626cf356653858c1bcb37181d7c5e498ba4c 339148 libbcpkix-java-doc_1.56-1+deb9u3_all.deb ef58f789cdf8af521d9d5b615de5fe46b277e24d25041921f2501c6fb4ce508b 714542 libbcpkix-java_1.56-1+deb9u3_all.deb 922100f4e75c4b24ccce2d2f3055cf32dbb033fd404743629889d76bc8bbfd51 1934652 libbcprov-java-doc_1.56-1+deb9u3_all.deb 66b73edb38277b5cb156566b1d3c6dec47e116257dab9edcb576599d1e98f8ed 3637070 libbcprov-java_1.56-1+deb9u3_all.deb Files: 1d8ba814969c12a63c33a897a71db2ea 2566 java optional bouncycastle_1.56-1+deb9u3.dsc 75a7199d4007330bbe7fa6bd438d60cd 10191556 java optional bouncycastle_1.56.orig.tar.xz 1d83a5197aa625630366b50ac511f257 11820 java optional bouncycastle_1.56-1+deb9u3.debian.tar.xz d739d1fb7b06f22fd336f0118120ab11 13459 java optional bouncycastle_1.56-1+deb9u3_amd64.buildinfo 5bc37bf815c31ed00816253ca4045f63 97686 doc optional libbcmail-java-doc_1.56-1+deb9u3_all.deb df4b40b6aef5c3ee2edc59b1e7ec1074 152338 java optional libbcmail-java_1.56-1+deb9u3_all.deb 8a412d543c71433b26310179b1727767 186190 doc optional libbcpg-java-doc_1.56-1+deb9u3_all.deb d3809d6bd666da7ea3a28673f6476019 351556 java optional libbcpg-java_1.56-1+deb9u3_all.deb d02fea82806ff00906a18fdfacaf004e 339148 doc optional libbcpkix-java-doc_1.56-1+deb9u3_all.deb e589d5c835ab05738545427693ae2d5b 714542 java optional libbcpkix-java_1.56-1+deb9u3_all.deb 655ee2afb1bae8ed27caf6bc38438825 1934652 doc optional libbcprov-java-doc_1.56-1+deb9u3_all.deb c317eb15940e2e2bddac646278e8f18e 3637070 java optional libbcprov-java_1.56-1+deb9u3_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl+j2dQACgkQHpU+J9Qx HljD5A//dDTd0VlnM45TQonnTwmCsrg4yAEO48EP4wd9TcmNGhw11V+TFwverJRH 3+pGyjsjZ9cR8W3uTxLcuZZyKKuX62JGZXXNPLI+ZeYDg3qYwVes3nEHpvT0BqrX adp7QfhkZqhFXxpp/L8IFtsB1hncOdvpNI/1DoFi4D2ueZXTrg3QKIY9DPRFLSiO EjBBSNxJSFzhqfYApjk9BZTlSnQqGa8PtaKl8QqA0mr+eN2maKsKYC5Q3mFuVEO1 lqgiQXxSv0l60wX+nUcXQ5rniSsH9+/1HI27FNuT7Tqcj4GkBH8UmO+VBlqD+IEE isHCNOOZ7BML5dKQPChbnn2bVAtxkeAzSQQ5LLjjC6XoeYdSDrRU0uEGKm2W1kqx Q6LK8nJDArt/izB+xPCN+dhNgKF0jjywUwJ3TeT45n0+20XVvBBa1wlGDuR8eKoi MfzBd4w7569oB3j/h+so2VsN96fMK4NWmeDVJED5oWX2lS9x2eMwmujc9LbiI5WB 5pvUQ8R7mFneOJY6W4sjxmT/yzalQ5G/CoCWJD9dnTbB/cOUIGdmj1cNwepWmXSr IR1CEcCExKJQql0ISxUC4t3dGUcr0mfkRwaFeZDDLBXLfcThHgY1E9Drbr6VlyH8 Y6WZcLgFV67tdd4Q+bkEA8sePQPPPWuhaf4OTNVBZ5W1bNqouEU= =9sDl -----END PGP SIGNATURE-----