-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 29 Dec 2021 00:31:51 +0530 Source: python-gnupg Architecture: source Version: 0.3.9-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Elena Grandi <valhalla-d@trueelena.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Changes: python-gnupg (0.3.9-1+deb9u1) stretch-security; urgency=high . * Add patch to add checks to disallow newline-type characters in passphrases. (Fixes: CVE-2019-6690) * Add patch to add --no-verbose to the gpg command line. (Fixes: CVE-2018-12020) Checksums-Sha1: f174ee6ed31850fc8b429345a3eb931447150450 2198 python-gnupg_0.3.9-1+deb9u1.dsc 75fd5ed615edfaf5b3e5ef0af0d14f0e3c6cd0b1 42260 python-gnupg_0.3.9.orig.tar.gz be817b8b4a3f331bbeb3591690b036c1ef144c2f 9500 python-gnupg_0.3.9-1+deb9u1.debian.tar.xz 2c420fc9799ee1af067f465e4d66cf5ce095b678 6782 python-gnupg_0.3.9-1+deb9u1_source.buildinfo Checksums-Sha256: 6ddf1b04bdca328a2c66a2cf678822a22f0ab8e263873ce9f326c13651d48aea 2198 python-gnupg_0.3.9-1+deb9u1.dsc ce86ed2acc96bc79e9bfb5eca474ebcf79a1edaafc5da4b44f736722dc86fada 42260 python-gnupg_0.3.9.orig.tar.gz 21e786c35d4a948d4eb5e26431ee8528521b98d805883c2bc96e3ac2b06055a5 9500 python-gnupg_0.3.9-1+deb9u1.debian.tar.xz 8bc0349ded5365cf5aebbb318a059d2c5a86c268cbe283d306f8aefff1e8091e 6782 python-gnupg_0.3.9-1+deb9u1_source.buildinfo Files: 3d0ad0b1c008cdf929d44bd2ad9009a4 2198 python optional python-gnupg_0.3.9-1+deb9u1.dsc 426369c30d5693357b12319e454ccde6 42260 python optional python-gnupg_0.3.9.orig.tar.gz 4a7678d1863c0ca14fbd2c84345af640 9500 python optional python-gnupg_0.3.9-1+deb9u1.debian.tar.xz 168f3ab4de10cd02d8528d1a88604b56 6782 python optional python-gnupg_0.3.9-1+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmHLaHMTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLluBZD/489QP6tG76ypw27ZK3OcLIJwmR2vFc 2fiVu9NLdixcKMPuzrLuf3aZuAsphc0jdZr+lsff38Fb4I7+2UihPrw2zVBS5EOZ XB22wFst2aqDjZLDfRAQlgWJP6VSOqhNRbZT2xohrTfgm+dsVuWmbw5pNwr3WTuN CdRvHWcgdMBNVu7xIejhiewfXjGgeNd999ugiQpuAZ3Ya+i0jM9uZrlX7KEQf/Yg FdCofwUzKik1NwcwFPdlzSNTk8Iehq8ILvWjtX9QN+uSI/zdIPi8BXWjtB5B7zu8 5Fg1Xw7UdrgQTug87/MuKg9U7uCWMz2KIINLvmRWb3PlE9auJ5q84JuJ6zPQNJ44 /F+xSYIirRfQjFG5sPcZZRSWK7ybSQ8yr3/hAd8k12plgIRgNHdJaSMwsOw7yjhM J+d9M2IWE2ItYlwDhCqxh749wpphw1x9nJEbQwSRfVYJ7v0nO/8j1mFSciHyNapY c9U1ppb2LQircBSaTIIZBYP/hE9wGSkmJr+enzDOYKe1CMKYImKY7khrWw0MT0Ie 0DGwOa3uEMg9twxTcmcm3LP+cthhSaJh+gn3Cx3GDwY5U3Ly25N8cbZeRrJsgT9d Q7N3cCoC5oYu1ao01E3L3Lk5GhU2edpWGY5wCXjNBFVeZk7bEcGrpassdUZVc7L0 ICygES9YI4jMkA== =2ima -----END PGP SIGNATURE-----