-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 05 May 2022 19:13:10 +0200 Source: ecdsautils Architecture: source Version: 0.3.2+git20151018-2+deb10u1 Distribution: buster-security Urgency: medium Maintainer: Steffen Moeller <moeller@debian.org> Changed-By: Sven Eckelmann <sven@narfation.org> Changes: ecdsautils (0.3.2+git20151018-2+deb10u1) buster-security; urgency=medium . * debian/patches: - Add 0001-verify-fix-signature-verification-CVE-2022-24884.patch, Fix CVE-2022-24884: Improper Verification of ECDSA Signatures Checksums-Sha1: bff639826d802b3849dfb7058174868610d5f58c 1973 ecdsautils_0.3.2+git20151018-2+deb10u1.dsc d9772ffbdd17071e64ff2ed1f6c211d3b76b16e7 11888 ecdsautils_0.3.2+git20151018.orig.tar.xz 1f442f2b7ed8529c9d8113eaa792cca541fa0b45 4012 ecdsautils_0.3.2+git20151018-2+deb10u1.debian.tar.xz ab3ddc0e1f9439c7804d1803096b48533354cd7c 7136 ecdsautils_0.3.2+git20151018-2+deb10u1_amd64.buildinfo Checksums-Sha256: ff817afa504d7edc2ec4f9ebe46fb498402ea39576482e17fd845a535f7f4ad1 1973 ecdsautils_0.3.2+git20151018-2+deb10u1.dsc 7dccf86cc12ac3b78dfb1f76650d2040bb59712ff3599d39a74ddef630324dd7 11888 ecdsautils_0.3.2+git20151018.orig.tar.xz 4f5042274e511c5a2d209a6abd96d713f5580575a8ccae82c97d349e96ad0243 4012 ecdsautils_0.3.2+git20151018-2+deb10u1.debian.tar.xz fd62139ac01280aa524c0b65cd1ad27516cbbf95227e290e3bf02be30c39f587 7136 ecdsautils_0.3.2+git20151018-2+deb10u1_amd64.buildinfo Files: 3681511dd65c1fa7af73e337453201bb 1973 utils extra ecdsautils_0.3.2+git20151018-2+deb10u1.dsc 4bfcf061cba8be9de5e4c814247bf7f4 11888 utils extra ecdsautils_0.3.2+git20151018.orig.tar.xz 5493a9492fc8256ff21786e50a57cd0f 4012 utils extra ecdsautils_0.3.2+git20151018-2+deb10u1.debian.tar.xz 3bae5a0661679ed537bd77b2f210c4a5 7136 utils extra ecdsautils_0.3.2+git20151018-2+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEF10rh2Elc9zjMuACXYcKB8Eme0YFAmJ1Ut8ACgkQXYcKB8Em e0Z7rxAAnRUSSgfw732PJH5X9tnEdz+R7SGTtEyFOWChozRzZ9QUS9qD0K+SZBX5 7gryMINHlSsI6kyFGGfX5rIbh5cx7oG3LDfaT3OqZBzKsRyw6zN9/tCt/dPj22JS Fxhza92eMBff67/MdVoyZV+ewsVm3gQAdr1p8T91lP0qKq2cguJq7Ls1PJOk1I3d gvTEdbY3FGBKbKw4vi12bfEtPF7IebVf9bmHUWOSzu88i9YWwBlvnaGld8NrYJly V+6AxxG3sv00LPappDZHZ5uMk4jGSjTGMp0twILFDNzhhMYTrI7SgRwUlz9eXiJb 85iajuDj3Ye5EVCSyqSKlDMZCo5wqLMgZowUS+ZFFLxV+BeCeLN4DLIb46vY/u2p h12PNTVziJq8R73LUjVOnXdbQ8ZasAAuSYOGVHUC1iW+vqtFzuk1e+c6kz4kPcoR 34KDUfZIyep30LfgADPu8DiS1kmeN1ImEylWvCz/JTx48mbaWYqmBXn0nVEDPv97 vfeqp3j2dLs2Jju9DMuGbpW7qvgre3aUTW9UNvwAVyqjpXiiqczisAh7cPRS8cnS ocDXYUKnMr3TeUcIBusxXhOadVIALISuGNJuhlHpeGSHzYtKVa/zcvr79VdHMot0 4JTtJgun+je2kQied2cBVf2CRuBEGgwedQNslbkaXmwMqxzAhLs= =nzae -----END PGP SIGNATURE-----