Accepted gnupg 1.4.12-7+deb7u5 (source all amd64) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 26 Aug 2014 22:11:32 +0200
Source: gnupg
Binary: gnupg gnupg-curl gpgv gnupg-udeb gpgv-udeb gpgv-win32
Architecture: source all amd64
Version: 1.4.12-7+deb7u5
Distribution: wheezy-security
Urgency: high
Maintainer: Debian GnuPG-Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
gnupg - GNU privacy guard - a free PGP replacement
gnupg-curl - GNU privacy guard - a free PGP replacement (cURL)
gnupg-udeb - GNU privacy guard - a free PGP replacement (udeb)
gpgv - GNU privacy guard - signature verification tool
gpgv-udeb - minimal signature verification tool (udeb)
gpgv-win32 - GNU privacy guard - signature verification tool (win32 build)
Closes: 725411
Changes:
gnupg (1.4.12-7+deb7u5) wheezy-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Add CVE-2014-5270.patch patch.
CVE-2014-5270: side-channel attack on Elgamal encryption subkeys.
Cryptanalysis attack as described by Genkin, Pipman and Tromer.
See <http://www.cs.tau.ac.il/~tromer/handsoff/>
* Add 0001-Screen-keyserver-responses.patch.
Apply a constraining filter to imported keys. These filters can verify
the fingerprints of the keys returned before importing them into the
keyring, ensuring that the keys fetched from the keyserver are in fact
those selected by the user beforehand.
Thanks to Stefan Tomanek <stefan@pico.ruhr.de> (Closes: #725411)
Checksums-Sha1:
e3916e19b5eee3ef68183735079de9d59b0b4204 2324 gnupg_1.4.12-7+deb7u5.dsc
ec1359fd1c274b1a3a5bffdf099f6582d09602b3 112433 gnupg_1.4.12-7+deb7u5.debian.tar.gz
ac209c93563d0e4ee77e9369ed4e7b8d15fa9f0d 616154 gpgv-win32_1.4.12-7+deb7u5_all.deb
b9040b7b102d84a0a3624b7a3f542f1fbd8e2506 1954762 gnupg_1.4.12-7+deb7u5_amd64.deb
649ec04d236c2f6a6421969cf47f9fa43248558c 64314 gnupg-curl_1.4.12-7+deb7u5_amd64.deb
9cff86496001ca9878df5050c9b0254840096a3a 227682 gpgv_1.4.12-7+deb7u5_amd64.deb
857bd7d9d49ed71c36476943c4e8a8084529be4a 353730 gnupg-udeb_1.4.12-7+deb7u5_amd64.udeb
a24021f775ddd4ee3eefd87614a0f2bf00898e78 130274 gpgv-udeb_1.4.12-7+deb7u5_amd64.udeb
Checksums-Sha256:
c0031a149c402822a5c6481c8bdd50814db98e13eccf59920efff8e15575a5e8 2324 gnupg_1.4.12-7+deb7u5.dsc
056446c8b8b805bcfbe9f37f05ff49c6dff033499c28857c00be2ac30733055e 112433 gnupg_1.4.12-7+deb7u5.debian.tar.gz
cd03d7f989a9ca59ac7b61c217a5ed4f3d1608b10d48dbf2084652e5c9772c9f 616154 gpgv-win32_1.4.12-7+deb7u5_all.deb
47954f37cd1e9279235749a01aa69d303ceef8e9c3ebd0ebc4b42532ea9f558e 1954762 gnupg_1.4.12-7+deb7u5_amd64.deb
48c69fa90cd573bdd84e86ecb434dd57c33c11db1d55c556468802c6be1c8dda 64314 gnupg-curl_1.4.12-7+deb7u5_amd64.deb
0d41965b2f60d8a492e372fab8ff5f02d065b73b078ae8936ccc64b0bb689ab5 227682 gpgv_1.4.12-7+deb7u5_amd64.deb
523ce4b872d3269e24451d51e24cb4b3f98c668ef38cd1a28406c66cc438af8d 353730 gnupg-udeb_1.4.12-7+deb7u5_amd64.udeb
903ec500408f89be49a9678531763b2a8d3c2a8159f2f361bff2e9d150c056f1 130274 gpgv-udeb_1.4.12-7+deb7u5_amd64.udeb
Files:
f6af6d405e2450d252bd0d115d8da5dd 2324 utils important gnupg_1.4.12-7+deb7u5.dsc
500df3d468f168a934c7790b80f428e9 112433 utils important gnupg_1.4.12-7+deb7u5.debian.tar.gz
e00ae0a2e8185187f84482018851ec9f 616154 utils extra gpgv-win32_1.4.12-7+deb7u5_all.deb
9afa0c9b4c3c8939649764632338f499 1954762 utils important gnupg_1.4.12-7+deb7u5_amd64.deb
649b01a18b99b3322d8e4bf6ab10de52 64314 utils optional gnupg-curl_1.4.12-7+deb7u5_amd64.deb
37fcc4df257566ebc825ef13e77c96ae 227682 utils important gpgv_1.4.12-7+deb7u5_amd64.deb
3209b491f9fed90a25598a456f7e4d20 353730 debian-installer extra gnupg-udeb_1.4.12-7+deb7u5_amd64.udeb
a1cec7fdb8d7ae2c391837840309dc5a 130274 debian-installer extra gpgv-udeb_1.4.12-7+deb7u5_amd64.udeb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=+N84
-----END PGP SIGNATURE-----