-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 Feb 2017 10:04:20 +0100 Source: libgcrypt20 Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20 libgcrypt20-udeb libgcrypt11-dev Architecture: source amd64 all Version: 1.7.6-1~bpo8+1 Distribution: jessie-backports Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Luca Capello <luca.capello@infomaniak.com> Description: libgcrypt11-dev - transitional libgcrypt11-dev package libgcrypt20 - LGPL Crypto library - runtime library libgcrypt20-dev - LGPL Crypto library - development files libgcrypt20-doc - LGPL Crypto library - documentation libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb) Closes: 745453 796818 803081 812428 814954 821368 840205 Changes: libgcrypt20 (1.7.6-1~bpo8+1) jessie-backports; urgency=medium . * Rebuild for jessie-backports. * debian/control: + add myself to Uploaders:. - remove mingw-w64 and libgpg-error-mingw-w64-dev from Build-Depends-Indep: and libgcrypt-mingw-w64-dev binary package, no libgpg-error-mingw-w64-dev. * debian/rules: - remove mingw-related instructions from override_dh_auto_build-indep and override_dh_auto_install-indep. . libgcrypt20 (1.7.6-1) unstable; urgency=medium . * New upstream version, includes 30_rijndael-ssse3-fix-counter-operand-from-read-only-to.patch. . libgcrypt20 (1.7.5-3) unstable; urgency=medium . * 30_rijndael-ssse3-fix-counter-operand-from-read-only-to.patch from upstream GIT master: Fix SSE3 assembly on Nehalem. . libgcrypt20 (1.7.5-2) unstable; urgency=medium . * Upload to unstable. . libgcrypt20 (1.7.5-1) experimental; urgency=medium . * New upstream version. . libgcrypt20 (1.7.3-2) unstable; urgency=medium . [ Helmut Grohne / Andreas Metzler ] * Turn libgcrypt11-dev into an Arch:any package. Closes: #840205 . libgcrypt20 (1.7.3-1) unstable; urgency=high . * New upstream version. Fix critical security bug in the RNG [CVE-2016-6313]. An attacker who obtains 580 bytes from the standard RNG can trivially predict the next 20 bytes of output. . libgcrypt20 (1.7.2-2) unstable; urgency=low . * Upload to unstable. . libgcrypt20 (1.7.2-1) experimental; urgency=medium . * New upstream bugfix release. . libgcrypt20 (1.7.1-2) unstable; urgency=medium . * Upload to unstable. . libgcrypt20 (1.7.1-1) experimental; urgency=medium . * Fix package descriptions. The algorithm-list was incomplete for some packages. Closes: #821368 (Thanks, Katsuhiko Nishimra) * New upstream bugfix release, update copyright info. . libgcrypt20 (1.7.0-2) unstable; urgency=low . * Upload to unstable. . libgcrypt20 (1.7.0-1) experimental; urgency=medium . * New upstream release. * Update debian/copyright from AUTHORS. * Update algorithm list in package description. . libgcrypt20 (1.6.5+git20160413+8472b-1) experimental; urgency=medium . * New upstream snapshot. * Use hardening=+bindnow instead of hardening=+all, we are mainly shipping libraries, including static ones. . libgcrypt20 (1.6.5+git20160407+5e5d3-1) experimental; urgency=medium . * New upstream snapshot. . libgcrypt20 (1.6.5+git20160329+48ee9-1) experimental; urgency=medium . * New upstream snapshot. * Drop 40_Fix-building-random-drbg-for-Win32-64.patch, removal of src/gcrypt.h in debian/clean is unnecessary, too. * Build with DEB_BUILD_MAINT_OPTIONS := hardening=+all. . libgcrypt20 (1.6.5+git20160220+839d12c-2) experimental; urgency=medium . [ Andreas Metzler ] * Drop build/ from debian/clean, passing --builddirectory=build on dh $@ line makes this unnecessary. * 40_Fix-building-random-drbg-for-Win32-64.patch from upstream GIT: Remove include for sys/types.h and asm/types.h. Fixes FTBFS in win* (and possibly kfreebsd-*). * 25_norevisionfromgit.diff: Hardcode dummy values instead of trying to pull revision/version info from GIT when autoconf is run. * Delete generated header src/gcrypt.h on clean. - The version shipped in the tarball can have different content than a freshly generated one, and with out-of-tree-builds the outdated version is not overwritten. . [ Daniel Kahn Gillmor ] * Add libgcrypt-mingw-w64-dev package which will allow building a gpgv-win32 package for debian installer's win32-loader. Closes: #814954 . libgcrypt20 (1.6.5+git20160220+839d12c-1) experimental; urgency=medium . [ Daniel Kahn Gillmor ] * Build out-of-tree for cleanliness. . [ Andreas Metzler ] * Also set --builddirectory=build on dh $@ line. * New git snapshot, drop 30_bufhelp-disable-unaligned-ppc.patch. . libgcrypt20 (1.6.5+git20160212+a9b64-2) experimental; urgency=low . * Add 30_bufhelp-disable-unaligned-ppc.patch by Jussi Kivilinn (Disable unaligned memory accesses on powerpc*) to fix errors on ppc64el. . libgcrypt20 (1.6.5+git20160212+a9b64-1) experimental; urgency=medium . * Upload upstream git master branch to experimental to get some buildd exposure. * New upstream version (preparing for 1.7.0): + Drop 30_support_source_date_epoch.diff. Upstream now defaults to no build-stamp. + Drop 20_fedora_libgcrypt-1.6.3-aliasing.patch. It does not apply cleanly and we want to test unpatched buildability anyway. + List newly added symbols in symbols file. + Update debian/copyright from AUTORS and LICENSES. RFC 1952 code is gone. Closes: #745453 + Core enums have been extended (gcry_ctl_cmds, gcry_cipher_algos, gcry_cipher_modes, gcry_pk_algos, gcry_md_algos, gcry_mac_algo) after addition of inter alia SHA-3, ChaCha20, Poly1305, curve sec256k1 and curves GOST R 34.10-2001 and GOST R 34.10-2012. Be paraniod and bump Debian dependency info (via debian/libgcrypt20.symbols) to >= 1.7.0. . libgcrypt20 (1.6.5-2) unstable; urgency=medium . * serial-tests was added in automake 1.12, add versioned b-d. * Upload to unstable. . libgcrypt20 (1.6.5-1) experimental; urgency=medium . * New upstream bugfix release. + Mitigate side-channel attack on ECDH with Weierstrass curves [CVE-2015-7511]. See http://www.cs.tau.ac.IL/~tromer/ecdh/ for details. . libgcrypt20 (1.6.4-5) unstable; urgency=medium . * Move Vcs-* from git/http to https. * Add 30_support_source_date_epoch.diff: Support setting BUILD_TIMESTAMP using SOURCE_DATE_EPOCH through the SOURCE_DATE_EPOCH environment variable. (Thanks, Jérémy Bobbio!). Use/b-d on dh-autoreconf instead of autotools-dev. Closes: #812428 . libgcrypt20 (1.6.4-4) unstable; urgency=medium . * Delete build-aux/texinfo.tex and let texinfo use the system copy instead to prevent breakage in pdf generation in UTF-8 locale. Closes: #803081 * Migrate from libgcrypt20-dbg to ddebs. dh_strip's --ddeb-migration option was added to debhelper/unstable with version 9.20150628, bump build-dependency accordingly. . libgcrypt20 (1.6.4-3) unstable; urgency=medium . * Upload to unstable. * Ship pdf instead of postscript docs. . libgcrypt20 (1.6.4-2) experimental; urgency=medium . * Pull 20_fedora_libgcrypt-1.6.3-aliasing.patch from Fedora to fix testsuite error with gcc5 on ppc64. . libgcrypt20 (1.6.4-1) experimental; urgency=medium . * libgcrypt-config: Do not fail on missing dpkg-architecture. Closes: #796818 * New upstream version. Checksums-Sha1: 2649120af86c64bdc77c4146874dfa8b2a74700d 2597 libgcrypt20_1.7.6-1~bpo8+1.dsc d2b9e0f413064cfc67188f80d3cbda887c755a62 2897695 libgcrypt20_1.7.6.orig.tar.bz2 e02ca1d09d3852ed019e6db918339abb0491426c 30284 libgcrypt20_1.7.6-1~bpo8+1.debian.tar.xz b784b68519b353813710fb0f959919eee1ed3e42 131308 libgcrypt11-dev_1.5.4-3+really1.7.6-1~bpo8+1_amd64.deb 93a91b6130830ac90daa11e8ed26d8199af30c3c 874274 libgcrypt20-doc_1.7.6-1~bpo8+1_all.deb a3d04aa14455ebdf632d7b65b7a79bf6d839a07a 571468 libgcrypt20-dev_1.7.6-1~bpo8+1_amd64.deb b65ed76210d5e7414962ab07c384d9007e125088 521962 libgcrypt20_1.7.6-1~bpo8+1_amd64.deb 5b976c89183a2ce5dfae07dab6734998ffe039db 368666 libgcrypt20-udeb_1.7.6-1~bpo8+1_amd64.udeb Checksums-Sha256: f802366934ef0faa2df6200a5e25ca65bf4ed269861816557b67c96013958864 2597 libgcrypt20_1.7.6-1~bpo8+1.dsc 626aafee84af9d2ce253d2c143dc1c0902dda045780cc241f39970fc60be05bc 2897695 libgcrypt20_1.7.6.orig.tar.bz2 07d28f6d4e1a4ecaff64ba11e8deb77fdc8e0426fc595852d821ecf7261dbce4 30284 libgcrypt20_1.7.6-1~bpo8+1.debian.tar.xz b0287fe40351dd15f76bae198a167cf2dc16bb3ad074703aefb9357b6f028c3a 131308 libgcrypt11-dev_1.5.4-3+really1.7.6-1~bpo8+1_amd64.deb 41cf702a3bd5bb4fa99177a116554f0cfaffb969a95b9a5e27936ac4c89600c9 874274 libgcrypt20-doc_1.7.6-1~bpo8+1_all.deb 45461ebf19d45e63622202742eca9f347652a845546a7c9dac968cd8b05028c6 571468 libgcrypt20-dev_1.7.6-1~bpo8+1_amd64.deb 13b741b9bfaf6c77c8d33716a452006ec528b8d71a86c7c827fafd921ec91d31 521962 libgcrypt20_1.7.6-1~bpo8+1_amd64.deb 10d30d6dde5803f01d1c7e0da4d41e04af5a0c70d82588edce5f0498bf95a5ae 368666 libgcrypt20-udeb_1.7.6-1~bpo8+1_amd64.udeb Files: 95d7c6acd5f0cb29ec7268808625b108 2597 libs optional libgcrypt20_1.7.6-1~bpo8+1.dsc 54e180679a7ae4d090f8689ca32b654c 2897695 libs optional libgcrypt20_1.7.6.orig.tar.bz2 3d7a3466437c625de345b2d47cd61928 30284 libs optional libgcrypt20_1.7.6-1~bpo8+1.debian.tar.xz adf8a3c003bd9e7b783b30b203a5f647 131308 oldlibs extra libgcrypt11-dev_1.5.4-3+really1.7.6-1~bpo8+1_amd64.deb 82d38fee9cfe3ac10ac9560ad0885973 874274 doc optional libgcrypt20-doc_1.7.6-1~bpo8+1_all.deb aa586b075eb6b436028c29ca79b58974 571468 libdevel optional libgcrypt20-dev_1.7.6-1~bpo8+1_amd64.deb ba942dfeb2469952cf84499f968dc231 521962 libs standard libgcrypt20_1.7.6-1~bpo8+1_amd64.deb e63f8bba128411a401f9f913d24cb409 368666 debian-installer optional libgcrypt20-udeb_1.7.6-1~bpo8+1_amd64.udeb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJYm0g2AAoJEPN4NMBnXhAxFE4P/iS0RUqwmQp8T2EgpqXyv5Sz wzZ/AtXctm6TNjhJxXmODYXqRuGXopVFsysId23fmReGZcZMIDU7v1mt4PJo4RQT 2SDedxks+HBYVUtz0zuFj6+iG/pSutAV/C9j9WI88DB/nlHEAsXVjUL9P5S2VAzW cU7c+7GzWXPiU1+4JvvikNm5kzmq0bgiEa1nJ0tDF8ysC+XHf4Z18mg6D0JMSHS+ ibInzQZ2YRXUgVv6MD4rZ1aNem+3wgqafBzekS1kBLCc/Yxi41kzBgRw21WOYpE2 3RIKpW98BWxJ5z1Ah1uHHTw8FMzb54wpWBPvTbeP8/643IBgGZKgZr3ykpP+KBbL pf4Kgw7IP3uBX+BXk8qBSZidBPCudkP80/HaGZyz4PyewPV3OMKK0s+ZVhdrmMbE F+BixmvOgoEkRxNT0yDd0cF0WnpwUOFRgncwax2P3dgN15fVmxVCbLujpuWnAdjw sL9rPvaV1O0AkNbc9M+EiRO/MpwiuQfBscRwIHBBkNjd6WpTXbF6fPc5lRzGqNU5 GlPvgBJnNqpGTFkoR/jAdXcGMpSFaQLuS9InQLJ/PZ3IxRq5PYqROXR/khfmmgXU ou7ISjjxk0I3ukxg7t8shA+WPY2kFhZ0LP1fkINZLpji2CSIrwMmLz4QJF9Tr6NV 5YCNeuFWEvk39JyFECgS =d0hK -----END PGP SIGNATURE-----