-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Dec 2021 17:34:59 +0100 Source: gmp Architecture: source Version: 2:6.1.2+dfsg-1+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Debian Science Team <debian-science-maintainers@lists.alioth.debian.org> Changed-By: Anton Gladky <gladk@debian.org> Closes: 994405 Changes: gmp (2:6.1.2+dfsg-1+deb9u1) stretch-security; urgency=medium . * Non-maintainer upload by the LTS Security Team. * Avoid bit size overflows. CVE-2021-43618 (Closes: #994405) Checksums-Sha1: d4e25ea3bc1dcb115c457ad980deb64f03f49797 2211 gmp_6.1.2+dfsg-1+deb9u1.dsc 0c90aa18e0cdbef2b7606264332c23dc552a0f7c 1804424 gmp_6.1.2+dfsg.orig.tar.xz f0d6ba7d9764266c77b009192194ba301cbdfca7 21268 gmp_6.1.2+dfsg-1+deb9u1.debian.tar.xz 533da9b0b1c11191d1052886a551a9bd0f793281 6205 gmp_6.1.2+dfsg-1+deb9u1_source.buildinfo Checksums-Sha256: 0ce57232e517fc70ead63b515f26d4a492acd9041cd373b09db62f42326a7055 2211 gmp_6.1.2+dfsg-1+deb9u1.dsc 18016f718f621e7641ddd4e57f8e140391c5183252e5998263ffff59198a65b7 1804424 gmp_6.1.2+dfsg.orig.tar.xz afc4192a4749edfc5effed23993d419d2e9b499c85b8fd5c9f47145caca1c056 21268 gmp_6.1.2+dfsg-1+deb9u1.debian.tar.xz 2abfebc2dd100e9d676fc805c0cf4bf58114db71fb524bdd68a38a5292ceed5a 6205 gmp_6.1.2+dfsg-1+deb9u1_source.buildinfo Files: 18b3339c56cf34806009c204dedfb63f 2211 libs optional gmp_6.1.2+dfsg-1+deb9u1.dsc fcef1a8d9ab6e3b2dc17091bb8b7c854 1804424 libs optional gmp_6.1.2+dfsg.orig.tar.xz b346baa207d39ee4af8ee26f8e2e8bb1 21268 libs optional gmp_6.1.2+dfsg-1+deb9u1.debian.tar.xz 2ce3d810233d398c1a1b21dcc7713964 6205 libs optional gmp_6.1.2+dfsg-1+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu71F6oGKuG/2fnKF0+Fzg8+n/wYFAmGpCfEACgkQ0+Fzg8+n /wa7kQ//Q8P7+ozQ69rIgnvt+vYSlCHE40mngULcCqPD8ZL/tro0oFrINkI6/o5H MKphJOEZPJsRIH9RfeKt4gtecbMlYBJQKlqv/Fy9Jw6mKgar5quV8/EcTAEnQjOX hYMG8NWgnlL2zoxEjeC6AevLkQlXwFMv/grcb5poanQ6tpSNs5a75drTWgQmIkgg Ga+OXJ4sSjzuuwp24UK20P4A6qlmQpuOncGf6XM3+reEDeHF+rqSpvxCT6S+sLvF SfpA5ENBeLIkr6stBHdxrjWDk2J+qSHIimtgHLq/6SxzkOMDoTnYrCidA4GEWNmk 0vrVjLoFpRJ3xlmTDWd9uce+qV5pjNY6JC/PaCf5gOO4uwIJ4XXFpQjWSNRC5hXY DpEsogCVTQW7qzCUhyq5ZuJubSn9NFIg0lPZBh9v4fd+GdlLUmEdoUyvJgWFJPW6 3kpVLmJOO1OTLQdze4sfN5m2Ck7XfRNFTmNBeqPf5C42j8x3zs6vGNIxEKl3R0BK aWxHQQGQ072zLArcB7JpEvkAVWhBcBKUImncSXrvRuOOHXSMkYUggJoKBsM1XvBR U8aSaFBlQmMtksKC/qz7tISe4+aEgriXW6aZLN/W5Ya/ugB1iZ+ykSPsyyCSXGiN HYk0TJd7S8H4j7rQHBx3KuoZfAVoJuFZDBa3YOCMhxnab1MGgsY= =ECJb -----END PGP SIGNATURE-----