-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 04 Jan 2021 00:35:43 +0200 Source: p11-kit Binary: libp11-kit-dev libp11-kit0 p11-kit p11-kit-modules Architecture: source Version: 0.23.3-2+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Description: libp11-kit-dev - library for loading and coordinating access to PKCS#11 modules - libp11-kit0 - library for loading and coordinating access to PKCS#11 modules - p11-kit - p11-glue utilities p11-kit-modules - p11-glue proxy and trust modules Changes: p11-kit (0.23.3-2+deb9u1) stretch-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2020-29361: Multiple integer overflows. * CVE-2020-29362: Heap-based buffer over-read. Checksums-Sha1: 3a50dbcb84943db169bc06491c16a880c2a271b2 2480 p11-kit_0.23.3-2+deb9u1.dsc d5b9690958950b79793eda2809835693b9d8fbaf 1047441 p11-kit_0.23.3.orig.tar.gz fa8c6013271ff6f56195ee947db845ea281da13c 543 p11-kit_0.23.3.orig.tar.gz.asc 771fb4d3c3b58bd1d243bca9c036def240fa3305 22948 p11-kit_0.23.3-2+deb9u1.debian.tar.xz Checksums-Sha256: 39e9f079a37cc8d70ef185fef05d28a3ba60c6a05b8df050be903a5696989cfd 2480 p11-kit_0.23.3-2+deb9u1.dsc d487f04dba3f9e8256f53034c59c944ca45fd7b8434c095da6a74079644dcd82 1047441 p11-kit_0.23.3.orig.tar.gz a9268313ad8e6c3dae5f4cf9006d8a773861e567c98786482304b3cc91883647 543 p11-kit_0.23.3.orig.tar.gz.asc 843ca4c9bab2c2a062681e14935f8a5e383f7fc11b085a16992959b548edc4d2 22948 p11-kit_0.23.3-2+deb9u1.debian.tar.xz Files: 78841f7ce6f7c829d85516399a531592 2480 libs extra p11-kit_0.23.3-2+deb9u1.dsc 9f138da1455e99bc49182ada540c8845 1047441 libs extra p11-kit_0.23.3.orig.tar.gz 64c3560851c3d954e58b5af3f814a434 543 libs extra p11-kit_0.23.3.orig.tar.gz.asc 994eeeb0007552ee1b7be2913bed05cb 22948 libs extra p11-kit_0.23.3-2+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAl/yTSYACgkQiNJCh6LY mLHl7Q//c+04ov7ERz/a0d9Opi2sJDJREAZo+GsraTtisJUHBrCoyjOymyiFVfs8 zPgTWXx1zF4ypB3STodZs5adChf6gHUlXGANXSdLE7InbFYYaBx0CaRa9bP0r4ya MZRJLHYQpJb8m3N0UPpCSsCGy9znQ/rpF/J/j4eZmnBI/7bLZL/oqRg1vOkrFZaC lhWXdBCd1k3GP0y4KWvs1JKxT+jE/jhUXGFB30UGt38dl4ODbc6DfFY1iZywKaCg LZwvArxgzIKVPPEmpHdeUZiO/NBr78RdPdLERYNsvx49rFO/85T+2ybN8wGHaXMK L+s+MzbV6T1puE2IQqJUZfdunO8r034qIVS6mfwaPRf1P5AFhj7lBfpfp397mz5+ zbtmdq5o3IbfznzIpqqvQf36xmJcUdiKU1tKnGNWZU4j2r1zgUrhbE448TL5+ZUM n7Ysl4MtjQG0+KtajoSedVCpKPh8jc/EtvRffSrthDPyIsWKF0aQztH1LfsrPIL6 j6Xc6GYL3w3z96yNdJvqLDy2784etqyeu3GA7uXk2+gLvwusuohE2ROZp+D/j9cr auQE6baXrXnPUIjW6k03Sz7Xd/xex68BZpSzQ8L3RARlFYDXNXj3k/61Tl+ocIH5 5RZXsgw77NAqONARLYPzJ6GdsZivuv96NPZ/y+dGCE5Ir1mdOWo= =Rq0Y -----END PGP SIGNATURE-----