-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 13 Jun 2018 19:15:54 +0200 Source: libgcrypt20 Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20 libgcrypt20-udeb libgcrypt11-dev libgcrypt-mingw-w64-dev Architecture: source Version: 1.8.3-1 Distribution: unstable Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Andreas Metzler <ametzler@debian.org> Description: libgcrypt11-dev - transitional libgcrypt11-dev package libgcrypt20-dev - LGPL Crypto library - development files libgcrypt20-doc - LGPL Crypto library - documentation libgcrypt20 - LGPL Crypto library - runtime library libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb) libgcrypt-mingw-w64-dev - LGPL Crypto library - Windows development Changes: libgcrypt20 (1.8.3-1) unstable; urgency=high . * [lintian] Fix spelling-error-in-patch-description in 15_multiarchpath_in_-L.diff. * New upstream version. + Use blinding for ECDSA signing to mitigate a novel side-channel attack. CVE-2018-0495 * [lintian] Delete trailing empty lines in changelog. Checksums-Sha1: 3fa08df5621b891baa61c57346baa24f2233e7a1 2863 libgcrypt20_1.8.3-1.dsc 13bd2ce69e59ab538e959911dfae80ea309636e3 2989166 libgcrypt20_1.8.3.orig.tar.bz2 4e0610ba5d45eca951573fa7f62eacefcb27d60b 534 libgcrypt20_1.8.3.orig.tar.bz2.asc eb391602070380cd387f5515400390981864205a 28816 libgcrypt20_1.8.3-1.debian.tar.xz Checksums-Sha256: 5ee11668e4deca5092c6f853a1ee82e8796415bd394cc63be429496640aa3b58 2863 libgcrypt20_1.8.3-1.dsc 66ec90be036747602f2b48f98312361a9180c97c68a690a5f376fa0f67d0af7c 2989166 libgcrypt20_1.8.3.orig.tar.bz2 f3e70e2988f223dc2ac70ff51323fd8a99a5e32b9cc24ef193d347892c559f2c 534 libgcrypt20_1.8.3.orig.tar.bz2.asc 46d0cf2e42621b8a9eee67d6f2249ea8efea33daa5a2411d15adca5cc4042933 28816 libgcrypt20_1.8.3-1.debian.tar.xz Files: a58cc98ea59b2ddfaab6051e7b0e11c6 2863 libs optional libgcrypt20_1.8.3-1.dsc 3139c2402e844985a67fb288a930534d 2989166 libs optional libgcrypt20_1.8.3.orig.tar.bz2 59113fd8990da2a300f012431fc605e9 534 libs optional libgcrypt20_1.8.3.orig.tar.bz2.asc 60f605cf9d47552f9bf12abb67c477ba 28816 libs optional libgcrypt20_1.8.3-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAlshUk4ACgkQpU8BhUOC FISZDw/9H1MEFyMiT7UW71IZI0CLItL9JDhjM1DSBI5xrpesoB80ianM2wLFQXqP 3Xcy1YS/beXw4g8WeyZU3b8tXPbNbm4OYG+YKTq2f/w4Puxm0Hz0naXwHHssFa20 5o98xvnDLhHA9qt667xSUJoRsGuBACSP32KxEJqHJVpXxqWh7BR4J+K8k5sijtCf i92QKRl5JDeXb5Un7TlUIXDW3v+tUFW6dv4JNNvnbaHv3H613B/DPJ+4c0PuK+/T Dlni55ielmqaS4VUjTucPtj/sBJES8LcO9Myb20KS/56fXUrY0NAOskRTdJJuhTi 04Bkyi4w76qmwKk8LZql+hfhaLa4njSm62yH/GO751+lU269mdp46Wtk8keRizQ/ droqS2aMRtVDlhVE5bM88vXsVwINP3Lw3wak4+82dsol3XO2Ns69AJGOTQJJHuLN o2mjTV8xWFzZwSMjOvMfXy9nwZkDw4pl53hhxEFeqQxxXbwZ+GZgLTgrY19B5e3u +uYaY+AShKeB2kcwCwjIi9dDCUfcG2lDcRKK9M860c3DMs7Mr5YY75f89vL974Un dlOZ8ObbQAyRk3FnrfQqWtMIAynXnMLs7T64f2WB5p2BgNAZbdfCDCvoytQkd0C2 EpFD/S0/FYrU6zUczWI+hRNP8SRY8D/ef4HWEniX1ZeOkrN2aQg= =c3uh -----END PGP SIGNATURE-----