-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Jun 2018 11:58:05 +0200 Source: libgcrypt20 Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20 libgcrypt20-udeb libgcrypt11-dev libgcrypt-mingw-w64-dev Architecture: source Version: 1.7.6-2+deb9u3 Distribution: stretch-security Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: libgcrypt-mingw-w64-dev - LGPL Crypto library - Windows development libgcrypt11-dev - transitional libgcrypt11-dev package libgcrypt20 - LGPL Crypto library - runtime library libgcrypt20-dev - LGPL Crypto library - development files libgcrypt20-doc - LGPL Crypto library - documentation libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb) Changes: libgcrypt20 (1.7.6-2+deb9u3) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * ecc: Add blinding for ECDSA (CVE-2018-0495) Checksums-Sha1: 933bdae63d6afd2abca8a1f8a39d1a82dab9d3d8 2838 libgcrypt20_1.7.6-2+deb9u3.dsc 744bc1470967bb529d02f993bd7f62849bdca465 32760 libgcrypt20_1.7.6-2+deb9u3.debian.tar.xz Checksums-Sha256: 55ab5150f7ff08345d819db2d8b68ae7d443265ca35c2e6ca0c0052a59b3c1f6 2838 libgcrypt20_1.7.6-2+deb9u3.dsc 5947ca05db069293a0cd2c4cbb561072d5e5a13933849039e6f054290b90b57f 32760 libgcrypt20_1.7.6-2+deb9u3.debian.tar.xz Files: 5de7724dea82b0178a0e2963436fc604 2838 libs optional libgcrypt20_1.7.6-2+deb9u3.dsc bb559d259cbadce402c7215b49d80577 32760 libs optional libgcrypt20_1.7.6-2+deb9u3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlsjpLJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EBFoP/jZpPKtDUYV9eucZptYkVSxwFfpKsa4k FWBKXXjcTUj+9k+tbCK7MC/bhnIYAHc5+8/x3f2dy7w5qRjQPB8m3I2TAoWtfkp9 Q+coMrRRN2GELZ2SbbD8978aRn5EuMCN0qqpdGoZATsTW60s2Nwr0BoXmM1oUZQy IjmL+fkibVvsTJpOpoxloisx3Hum0qtRuts07nhJ8e05IHYrjJmlvSuQtC0OLKBl Z6B+uctRfw0V9xf1ccU0D2pqNM4goT0dT+IC5wFhFJHLfj1PuDc6oUEyxCxYIR+N KcpxOJKWi9G/N0RhYN+oY1gqudbAZwsFZOV70sH7Lk6Uaz0YaowxRezTFfPaxH4e c5JHOFBBVAtQcHeMXNcYMnwFd4HALQ43fHyhH/DgAvMNR68jvKmEzVIESB/BBQIr 19rrDEyx8aOkxkRJsgxEZpe7NvDHH89C23FBHQZOQHLYkQ8JZVavcTblY4AcxPNl U5yarvWnAA285ILBPizusdPwlfspOEY/lLMZCBqIL+FDHAZvZ+Pn1u2SKNSNNgPD 3Nk6n3GR38h8beo5RIiFbxNQayfwiKgCDRSgfiDdWTNVTrA4roV5KfsrXsPrXUJ5 ERe11sai23N1PXPU5KEoHj7Iygg07cye0cYnmEuqp8vV2vQfgxGihJB79fzfiuP/ ILZyv7lnVQ32 =GycB -----END PGP SIGNATURE-----