Accepted gnupg 1.4.18-7 (source all) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 02 Mar 2015 19:29:26 +0100
Source: gnupg
Binary: gnupg gnupg-curl gpgv gnupg-udeb gpgv-udeb gpgv-win32
Architecture: source all
Version: 1.4.18-7
Distribution: unstable
Urgency: medium
Maintainer: Debian GnuPG-Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>
Changed-By: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Description:
gnupg - GNU privacy guard - a free PGP replacement
gnupg-curl - GNU privacy guard - a free PGP replacement (cURL)
gnupg-udeb - GNU privacy guard - a free PGP replacement (udeb)
gpgv - GNU privacy guard - signature verification tool
gpgv-udeb - minimal signature verification tool (udeb)
gpgv-win32 - GNU privacy guard - signature verification tool (win32 build)
Changes:
gnupg (1.4.18-7) unstable; urgency=medium
.
* import a series of DoS and vulnerabilities from upstream, including
CVE-2014-3591
Checksums-Sha1:
e7996607efb70a91c0b1f9c767adb7499f7fa972 2524 gnupg_1.4.18-7.dsc
17aa87d71dbf1b2598166a9cae64503d544ce01a 298368 gnupg_1.4.18-7.debian.tar.xz
79d8c9905dc7c4bc51c47c001873328292ce68fa 553428 gpgv-win32_1.4.18-7_all.deb
Checksums-Sha256:
24a6cc157dc55411380abd7c03c187b0124bad4a145d98d8fadee5448c555acd 2524 gnupg_1.4.18-7.dsc
c60647dddc2eb65927545e3ce92c3efceb545a58ff2e295857321014396bae01 298368 gnupg_1.4.18-7.debian.tar.xz
30f46414d028abdc3fd81a195094223ac20854ffc8622ef4e46ea3c59e586351 553428 gpgv-win32_1.4.18-7_all.deb
Files:
d9a8350e47d6d8a409da45a914c34025 2524 utils important gnupg_1.4.18-7.dsc
425b97eb3ab2093607ee310c809d8464 298368 utils important gnupg_1.4.18-7.debian.tar.xz
64cd663c7be310facd126233db563eba 553428 utils extra gpgv-win32_1.4.18-7_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQJ8BAEBCgBmBQJU9LTkXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFQjk2OTEyODdBN0FEREUzNzU3RDkxMUVB
NTI0MDFCMTFCRkRGQTVDAAoJEKUkAbEb/fpcwBsQAJ2BPZzWdDsHnvjwv+5HTD0A
AWRaEwoAjuvwccAq0kPVVjtRDEycvTv3p0T2nUMNdexmUxAbr76MpWkJ1xsjJT/Z
8CcI5aj0wA0C3z6ewjg1+WKFN6FBJ/B/h0D1l1RdUOSVsEZXtn3vUYxdSwZfsU1V
iW+m9yBfO5odjKrDawHF1scSmQ94wfN77MYCFQWy6DWc9jMUgydKcikzdnApCcMB
6DXG8WgWeTFNB+Nafc7+MQIJkTyDGm9v60Ol6JDAAMhvQgSrZKI2gk07qDn8AXk0
2Ny+L+M1zBrRUy0H3rgQOvHH1/Wzg7nJB+cf7Za91lSJKVha918qYuMUlVY7ZXQt
XhKS4DuCHXUKVLa1NDLZpWRyVoW42NnhH+QYX6uhah2urSzD0beTZL+uruo2QkDe
BjUxlZ2V1WUZvR1frvaZExwXP0prMJf7tkSU1WFHZuY7txhdTCFhtrjIdypuqjsi
Ys8GeT9h+R+fVETawfA6NoZ7PK5bGyT6yE7LM6swDQduoNM2FxhZDy29fAa7qwHl
uN+tivMz/OdqiqIP2vEf3+Aw6l+VCbF6MexgQtM4EFE6TMaw2za1K9a8i0VZqCs0
pcXKBZGdYrCtCYq0A+wYDzr8C7zyLegpHkAPx3jws+DmLfulf+S4N+oSffkxx0Iv
1vP7cygC1ov9QOxCrVBA
=au7i
-----END PGP SIGNATURE-----