-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 30 Jul 2022 14:09:32 +0200 Source: gnutls28 Architecture: source Version: 3.7.7-1 Distribution: unstable Urgency: low Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Andreas Metzler <ametzler@debian.org> Changes: gnutls28 (3.7.7-1) unstable; urgency=low . * New upstream bugfix release: Fixes double free during verification of pkcs7 signatures. [GNUTLS-SA-2022-07-07, CVSS: medium] [CVE-2022-2509] + Update symbol file. * Add lintian overrides for source-is-missing false positives. Checksums-Sha1: 33533982c11f5e85fef30b5c3dee9ddcbe47f6a7 3442 gnutls28_3.7.7-1.dsc af811d06f64ea254a97a3bfae104aa3f130bc9d8 6351664 gnutls28_3.7.7.orig.tar.xz 7d54bc22cd7b6134102679305186692663ad0ca7 996 gnutls28_3.7.7.orig.tar.xz.asc 15ccb80aa58330075672c8b40956750b03d78681 66996 gnutls28_3.7.7-1.debian.tar.xz Checksums-Sha256: 96d3b551af42255b46cf0ea77bd4a830d6686a8dc4f71223d361e8cbf7f867f7 3442 gnutls28_3.7.7-1.dsc be9143d0d58eab64dba9b77114aaafac529b6c0d7e81de6bdf1c9b59027d2106 6351664 gnutls28_3.7.7.orig.tar.xz 2ca7cc33027c6a2316db52869a4b721f73560e0ade2b7bd758228dbbcebc36e0 996 gnutls28_3.7.7.orig.tar.xz.asc 459dac1944b82a461078824ca51fe762339f8b7840d8a90e2a78465b0828174f 66996 gnutls28_3.7.7-1.debian.tar.xz Files: b4ad410705f34bf488395e6026a27984 3442 libs optional gnutls28_3.7.7-1.dsc 39e5c71af7f444bdf175094a787843a2 6351664 libs optional gnutls28_3.7.7.orig.tar.xz f47f710215a58ea2d213f38a75319002 996 libs optional gnutls28_3.7.7.orig.tar.xz.asc 4407704682237ccda37d5e47ff26989f 66996 libs optional gnutls28_3.7.7-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAmLlJGYACgkQpU8BhUOC FIQALg/7BADC/PkMpoELstJ4+aiuzy1+3SQzSNtnPtv6qh3ZZrOwpF6LSt5xjQWP hwF0VlPNDNcuXSvlLE8+IZCsDLdEnTQe99Iihhq7S6CEGeMDoKY1W9xro9LrC0We 40n3xOA3P/CyQVpv28N/40C5Xd+B5sAD/gZZrsNB7BmQXwsQRFQ5N3IbudUs2UGT 3q63ufwVraoXKC2NBPMd/U+9qGuc1ZzKYZXDDwAXFZx2f6fB1SknJ2ARK003cUeF gzF6CrM6pvuuwKnvFjQUSjLl3iwOMJFSYODiAfIgKArw6FoDqyhi581wYVZggHCz tYSUbNgpcFcWLsREGdDix85huqtIgnTAM+ekLLtlyHPTh7OSDnlUUygF56oSBj80 LZTQh9QoBvYHa0ARhu55ANilrEV2qP4jZiXb+XCYVUWgsLBDBMBMGoIlFxXnM8Bl IrTBM6iv7sBPPFt9n7EaFsn1DZFPbS1Z79xF20xPjfj9wKAl5reaKUVsTM+Ii4YI Hc3REa6RIMWPlYo0XJRT3S+uON7Cuw6eSgzS6nhhvEQ32AE5supwju8sumRxrTPm /ci1rCp/lApU4BQ/YXiiiGrY21Y8Cl4qzUU/kbKDQacbwg8d4pQKtfYAY9m6j0Ni +7tT275sKWUdmpHtA1xlPQhRYokgYWQcFvmDqgZQQmrG0j5jbx8= =MTLL -----END PGP SIGNATURE-----