-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 26 Mar 2022 17:06:05 +0100 Source: php-crypt-gpg Architecture: source Version: 1.6.4-2+deb11u1~bpo10+1 Distribution: buster-backports Urgency: high Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1005921 Changes: php-crypt-gpg (1.6.4-2+deb11u1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. * d/salsa-ci.yml: Disable reprotest. . php-crypt-gpg (1.6.4-2+deb11u1) bullseye; urgency=high . * Backport fix for CVE-2022-24953: Crypt_GPG <1.6.7 does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions. (Closes: #1005921) * d/gbp.conf, d/salsa-ci.yml: Target Bullseye release. Checksums-Sha1: c3b8272f1df0e513c074c658e8225b5d1e6c63c6 2311 php-crypt-gpg_1.6.4-2+deb11u1~bpo10+1.dsc 8aaaaa4e3244f3ce2d35ad8d4dd8696ae370c487 13440 php-crypt-gpg_1.6.4-2+deb11u1~bpo10+1.debian.tar.xz 5fe67c11d9b54b905fe6b0dae8a7b457b32ce0ec 7811 php-crypt-gpg_1.6.4-2+deb11u1~bpo10+1_amd64.buildinfo Checksums-Sha256: 17dbb843a616986809186d4fa630ab5720e21cf27e7ad379af27d6aac1673d4a 2311 php-crypt-gpg_1.6.4-2+deb11u1~bpo10+1.dsc e4eef25fddaee307b8d50fbb69c1e9b1f07c46958686309e896782e616b68db0 13440 php-crypt-gpg_1.6.4-2+deb11u1~bpo10+1.debian.tar.xz 64adea25bb18764f189d83bdd96a8e33486aa6fcb6efc5b1f7930f5a21c89f81 7811 php-crypt-gpg_1.6.4-2+deb11u1~bpo10+1_amd64.buildinfo Files: e780456415184d9c2e22c6cdb8957bc9 2311 php optional php-crypt-gpg_1.6.4-2+deb11u1~bpo10+1.dsc 1962666f95daf3db526cfaaa5d56535a 13440 php optional php-crypt-gpg_1.6.4-2+deb11u1~bpo10+1.debian.tar.xz fe076ec6c3fbb550a2fc8aca4fda1e36 7811 php optional php-crypt-gpg_1.6.4-2+deb11u1~bpo10+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmI/OpEACgkQ05pJnDwh pVIWVA//YosDl//bIU3eDDT71RtzG3DNRluEYwC2XFj3RLn6Qu/MtIHZTWl2xYgK K87VC3RlwSzv+7aMotQLVDgIU0K0eNzHJrTuC6+toOeCsV/pwdsqQQCuOBdqaEbU dA0xeEw/tZDELhGCMp1+5Gp1+OV+cvZLvU09AovQU5PJylbbSMeJWoc1VdDx2e7D 20/qplkgRFAnVo6ts9ra9BrLxMqgrXl1/mtmI4rMVbl27KtS0QhsPpDKFfIEK60R cvwqCAop7Hdun1qpP05MsJrKBDfJy/9B/unBfzQbINBrShbq7cWhIbJP63inLJd6 LCjlLkJB9Tkk5+kgm8SgSeOAADHJxrfoJ7ihitTy0urQfxk238Yl/QA+0qiBcO/D ksqzZgcZq/G75XIZ8oKF4YeFHINdzWNKnkCRZlMFaHg/iqBjHlrAhzPpzf4sJAL+ xgegWlNIhITb0f6vp+b0TkPN7kspsP/P1eallFRDoa+xOxn6uN+dEwFnqd2D447o B50w6hs/u3I2bo1I9zKlbiZnkH8yyROD5uDWQ6ncZmv0/pWik1lm89++i47uvy5S 0f4RCYBpLwQWSvm4l/b1Zvv/wSI2tkPfDFpB5a6v6Z/vTWhXXlxbCWpYz/X5khl6 xou8uOT9RtWHuh0qQ0brgwUSZtfXcFDD1alpT06u6YSxSjD9IdY= =3G85 -----END PGP SIGNATURE-----