-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 07 Aug 2022 16:30:17 +0200 Source: gnutls28 Architecture: source Version: 3.7.1-5+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: gnutls28 (3.7.1-5+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix double free during gnutls_pkcs7_verify (CVE-2022-2509) Checksums-Sha1: fa6ecf9ffa5ced5c6abf827becabd030fc77fdb9 3674 gnutls28_3.7.1-5+deb11u2.dsc 5de5d25534ee5910ea9ee6aaeeb6af1af4350c1e 6038388 gnutls28_3.7.1.orig.tar.xz 8c2c3aabe289987bbe51ddc1ad4a42558683ca66 854 gnutls28_3.7.1.orig.tar.xz.asc 3e9ca3deb97187672bee2ed44d61d189e325547a 94568 gnutls28_3.7.1-5+deb11u2.debian.tar.xz Checksums-Sha256: 595e1121b264002001c4e38a431195788ba16c3ca1cca0bf2ee1d4c7983d4f78 3674 gnutls28_3.7.1-5+deb11u2.dsc 3777d7963eca5e06eb315686163b7b3f5045e2baac5e54e038ace9835e5cac6f 6038388 gnutls28_3.7.1.orig.tar.xz 13a683b12602c169a7ad7827ab0e3f35c8fa1f98675d0073cf7d54a8cd635582 854 gnutls28_3.7.1.orig.tar.xz.asc 5c3ab8346540dd43457f51248f20a1bfd675f3cfe6a876a743b978039832c0d5 94568 gnutls28_3.7.1-5+deb11u2.debian.tar.xz Files: f0b29e078106d37fa618b5562e2a1503 3674 libs optional gnutls28_3.7.1-5+deb11u2.dsc 278e1f50d79cd13727733adbf01fde8f 6038388 libs optional gnutls28_3.7.1.orig.tar.xz 590c9d64f7d8ee77671cdb9547f5edaf 854 libs optional gnutls28_3.7.1.orig.tar.xz.asc 9c7bd337403bf222718351cd60a82e59 94568 libs optional gnutls28_3.7.1-5+deb11u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmLv0MdfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Ei8MP/ikdWNktEZ9fIVig5HhYsyu/IrtU9oXH Bg49e955sRNpTIrVrJFIOFOsKXPlCTR+0N6GtHHVzfsp5Mx0UZONvbU+KMPZPm/e hiluxJty9aX8lsT+74vF4cND6P+SwYT5SJxlbgg9YMZw9F2jShN+ytA/bSkdvOkq LFDu7k3Y51NbQCcRSY1WnrT6o+vJTOKPfEzR10KsaOptIHM1YNqlt9zDHCKqyiII Rrfcetl/MebUxKUkO0pXiSxAqu44uRSpvFdIT8loc7R3+9Yi9eozr7cMbBJz5qrJ 37N7RsnWBmnnHzhAHKnZwFbMXiuOVyhT3mLhTO3qcyt6RNC2ZLFcvmaU3Ws9LRW9 zn/ExE68XInBlTes9Wo2QNX0MBA3OO5B5ZBLcrrYIlCIRieHJBn+9ScuZWCjOyHP MyzUknekjEJ64/+FzwbTwxQrfRvcFLNO94T0nHZ+wrfiKs+sUskeUemCAdoXaeHE FfqClyCSMo1ux0S3WMj1gWZORKIPSO3IeGi9xl2LjekrkpGeAP1KnrP9p9uvPm73 iNcxD4+O+RcSXbmreZybBqTFWX0t4O92U2L+KsyRSJf4F0GrwyPftYU4j37kbYho Zy/VBA83RVJcOrJ9Gb9FS+AylWddQiLU9rklijUZ4jSElG/Y49FI5TP1U+zdHdyp D0t2/5qNmhcO =wNv9 -----END PGP SIGNATURE-----