-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Apr 2017 20:04:33 +0200 Source: bouncycastle Binary: libbcprov-java libbcprov-java-doc libbcmail-java libbcmail-java-doc libbctsp-java libbctsp-java-doc libbcpg-java libbcpg-java-doc libbcprov-java-gcj libbcmail-java-gcj libbctsp-java-gcj libbcpg-java-gcj Architecture: source all amd64 Version: 1.44+dfsg-3.1+deb7u2 Distribution: wheezy-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: libbcmail-java - Bouncy Castle generators/processors for S/MIME and CMS libbcmail-java-doc - Documentation for libbcmail-java libbcmail-java-gcj - Bouncy Castle generators/processors for S/MIME and CMS libbcpg-java - Bouncy Castle generators/processors for OpenPGP libbcpg-java-doc - Documentation for libbcpg-java libbcpg-java-gcj - Bouncy Castle generators/processors for OpenPGP libbcprov-java - Bouncy Castle Java Cryptographic Service Provider libbcprov-java-doc - Documentation for libbcprov-java libbcprov-java-gcj - Bouncy Castle Java Cryptographic Service Provider libbctsp-java - Bouncy Castle generators/processors for TSP libbctsp-java-doc - Documentation for libbctsp-java libbctsp-java-gcj - Bouncy Castle generators/processors for TSP Changes: bouncycastle (1.44+dfsg-3.1+deb7u2) wheezy-security; urgency=high . * Team upload. * Rebase 01_build.patch because it did not apply correctly. * Fix CVE-2015-6644: An information disclosure vulnerability was discovered in Bouncy Castle, a Java library which consists of various cryptographic algorithms. The Galois/Counter mode (GCM) implementation was missing a boundary check that could enable a local application to gain access to user's private information. Checksums-Sha1: 3d6d39524266a10952c6a01b40057c552f492192 2889 bouncycastle_1.44+dfsg-3.1+deb7u2.dsc 8862a7c4b3bccd6af7bb7aaf00386745eca01ae6 20944 bouncycastle_1.44+dfsg-3.1+deb7u2.diff.gz 36371225c8a37e9a684fdfa04d18697687e57984 1385666 libbcprov-java_1.44+dfsg-3.1+deb7u2_all.deb 04e3caa5835638e257e90991a4af123e6bc0fe5e 4208 libbcprov-java-doc_1.44+dfsg-3.1+deb7u2_all.deb f953cd9fe83ca497ab955f9b09945f54a476e8ac 239684 libbcmail-java_1.44+dfsg-3.1+deb7u2_all.deb ba771992424a0859bc63344ea0dad2fc40221505 204556 libbcmail-java-doc_1.44+dfsg-3.1+deb7u2_all.deb 4d073bd75cc06a4b7b5379410bc4e2ab600799be 70870 libbctsp-java_1.44+dfsg-3.1+deb7u2_all.deb 56238dc6c630fa901b1ea133318d3e2d0b781292 46228 libbctsp-java-doc_1.44+dfsg-3.1+deb7u2_all.deb a358f0f2e81590e3a241d1308a8cd97e88914522 188760 libbcpg-java_1.44+dfsg-3.1+deb7u2_all.deb 437da4989476844680770f31060eca6daca7d8da 173510 libbcpg-java-doc_1.44+dfsg-3.1+deb7u2_all.deb 50229fc142398cd9b6682620e4e6357180e01953 2091086 libbcprov-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb b323e5a64772cb6508095ad517c1b9cd6638bc65 279686 libbcmail-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb dea1c44748f4de12d17690b392c7d3e521cbc326 38812 libbctsp-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb 472e29ab5bed89abd04e4d64b1998e764ed7c409 240138 libbcpg-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb Checksums-Sha256: 43c7498c036ead11e0b00fa78c1451fcf3b648a8b190d49c0f836cc7fbb933a8 2889 bouncycastle_1.44+dfsg-3.1+deb7u2.dsc ea7266ae3ff44828a4f30d98a30545096e18a1783d508caefcd79e8517db2935 20944 bouncycastle_1.44+dfsg-3.1+deb7u2.diff.gz c6921da6a8e714ce58cecc187a43fee0a69dea7404842ca169360c96953096bb 1385666 libbcprov-java_1.44+dfsg-3.1+deb7u2_all.deb 9076168e16349bfe428f956ba19d14f91f08ea6cc6776f5ad4448ad926765053 4208 libbcprov-java-doc_1.44+dfsg-3.1+deb7u2_all.deb b6abeb9b64c1a6f1c3304e4a79a2b4ac5cb398c13bda836e2396465532978b6a 239684 libbcmail-java_1.44+dfsg-3.1+deb7u2_all.deb 3f666feb05afe5a7d383d8f9222cb3933f5c9cbfc0826ba4705b20119a4f0c86 204556 libbcmail-java-doc_1.44+dfsg-3.1+deb7u2_all.deb 2c187ced14fa51ba6d67a344a24901d3c397dc4394a440b1a8e242a79b407204 70870 libbctsp-java_1.44+dfsg-3.1+deb7u2_all.deb 24e86110e887087cadcd77b9de1525dfcf6037c648a6f6fd95a078a9c997b648 46228 libbctsp-java-doc_1.44+dfsg-3.1+deb7u2_all.deb 8e2d0b1544c786569d1643e7c3af856dad6ee5a841df638f71b6cdbdc7f5c78f 188760 libbcpg-java_1.44+dfsg-3.1+deb7u2_all.deb 2cd51c9e5a9caa34627e46678fff72c519d04837cfca5f9d1dd733d236db8b47 173510 libbcpg-java-doc_1.44+dfsg-3.1+deb7u2_all.deb 9c728e588e1660e313795b301bde33c2d108e65853137753ad97f1cf2ce573c2 2091086 libbcprov-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb 10f06e453bb973533f6be7a1ecd13f446cd94e4af10fc3464af874fac3d29ad0 279686 libbcmail-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb 2ed3b334940b79b6c9e4126b0192a374fd783e8e184885cf12c1bfe3a224e406 38812 libbctsp-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb a17a61122963c096aa8b2d1dbefed67bce10ba95e842ad7572042a6200a3e50d 240138 libbcpg-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb Files: c04a6cd4f47c27e58ef762cb100a0e23 2889 java optional bouncycastle_1.44+dfsg-3.1+deb7u2.dsc ff3e5b40b796980552716834708632df 20944 java optional bouncycastle_1.44+dfsg-3.1+deb7u2.diff.gz 51d658f692a9ffa233866039776c2a5a 1385666 java optional libbcprov-java_1.44+dfsg-3.1+deb7u2_all.deb d325f7187f0acb3a11af67d51d1cc412 4208 doc optional libbcprov-java-doc_1.44+dfsg-3.1+deb7u2_all.deb 24afe069316365758de8b794e69d2d6c 239684 java optional libbcmail-java_1.44+dfsg-3.1+deb7u2_all.deb 21df92ab8af8a3bf58904b684d4799a2 204556 doc optional libbcmail-java-doc_1.44+dfsg-3.1+deb7u2_all.deb 514b2afa017cfae8f2484054c16595cb 70870 java optional libbctsp-java_1.44+dfsg-3.1+deb7u2_all.deb 76338e520975c670a8def2d5f88c2f89 46228 doc optional libbctsp-java-doc_1.44+dfsg-3.1+deb7u2_all.deb 3ed0924b987f805d0845d646e27d9ed8 188760 java optional libbcpg-java_1.44+dfsg-3.1+deb7u2_all.deb 4ca3d643548ad291b37d3a21f1ae8cd5 173510 doc optional libbcpg-java-doc_1.44+dfsg-3.1+deb7u2_all.deb 7fb6ff7e7e440790e31f3371a0c48da8 2091086 java optional libbcprov-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb d2e48b994bea1800a7dc8589a45be20d 279686 java optional libbcmail-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb 62afc5e1e412b712399a82f6dc37cc50 38812 java optional libbctsp-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb bb8bffb97df77dd8e1d2e7bc8e21289e 240138 java optional libbcpg-java-gcj_1.44+dfsg-3.1+deb7u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAljrz+ZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hk6MAP/i95i+o2T4eaR84pg3qFt3A44SDPLDBUMxAR fEPRnyUuoTOYehgp4vgZijgpHJ1a6b240DZq4ClOc6+iTQfM1zRPTx/eBd+g5QW+ gHsKZvfu2ph4OAgRTVDdqRZj5hI5/bXhFNXTyirr91ehQFAMYTsxElCdE0Bz+M8k nFsj+9w0Teo6OjstLKski9ltsedVIJq5Qd3py52cl+RBo4K7I2UuuizTS0cFuJma yegBcWB/uhFvJpY6ZdmTa3dKk2nFZxbS/E5H9laBrS7iQYAlofVZZW9YwLsDsY9S LC/hrxOvYbozKzncn0zLSSkob9HIImxQdfPo4sFdH0FWwCvodaaB3TAsMH0XbQZ5 5VLTIRj5tbi9rsV6lBzsemX8ZmPqqOc60e4OkfWqkWbp+FLYP86NPqqkfpNnzrYs 3LV66XEpgLMHV7NJ5ZEfuPHMwnEQnEQDMDRPupBsQ24FSRGta8Kcw4za9NQ/05RD qiyOuvauUbrCv59vxL7ik1+MkyBSdWRO5dbFNx24XhsXsqvyUF/APiTdLbABPA+W Wbqw/AQW6YM5+469ML4yEtwFuMDi+G+pzX6sUvNCy6q2MlgkWjA7/7MG72SIK0i4 qNBMAn2tKz0yuqkxIFwTK4JEr85ru1wyI8+FNzrTlJU55YWa5JvlewUtsQlkBXMg e1hp46mw =lUCy -----END PGP SIGNATURE-----