Accepted libgcrypt20 1.7.6-2+deb9u2 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 27 Aug 2017 11:58:04 +0200
Source: libgcrypt20
Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20 libgcrypt20-udeb libgcrypt11-dev libgcrypt-mingw-w64-dev
Architecture: source
Version: 1.7.6-2+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 873383
Description:
libgcrypt-mingw-w64-dev - LGPL Crypto library - Windows development
libgcrypt11-dev - transitional libgcrypt11-dev package
libgcrypt20 - LGPL Crypto library - runtime library
libgcrypt20-dev - LGPL Crypto library - development files
libgcrypt20-doc - LGPL Crypto library - documentation
libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb)
Changes:
libgcrypt20 (1.7.6-2+deb9u2) stretch-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* ecc: Add input validation for X25519 [CVE-2017-0379]
Mitigate a local side-channel attack on Curve25519 dubbed "May the
Fourth be With You". (Closes: #873383)
Checksums-Sha1:
d0c8b9cd9ab574e5a39e6f7ca9fee8b1c1c85e2b 2838 libgcrypt20_1.7.6-2+deb9u2.dsc
62df79e2ba8557dff4ca265478189cd39528e2c5 32044 libgcrypt20_1.7.6-2+deb9u2.debian.tar.xz
Checksums-Sha256:
ece58728d3b18510e0f0a699b5207c393f67e96e0e9cb3191eeb831f2b7d61c1 2838 libgcrypt20_1.7.6-2+deb9u2.dsc
190182723dd39b256cb03e0b74ad9c2047943fe53584c7794b2cec080d5e33e6 32044 libgcrypt20_1.7.6-2+deb9u2.debian.tar.xz
Files:
90a6437e47b9932872c8fb19f9cd8b05 2838 libs optional libgcrypt20_1.7.6-2+deb9u2.dsc
cb7b252278ec7bd5da6405bfdd68561f 32044 libs optional libgcrypt20_1.7.6-2+deb9u2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=+KZi
-----END PGP SIGNATURE-----