Accepted libgcrypt20 1.6.3-2+deb8u6 (source all amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 24 Sep 2019 16:18:55 +0100
Source: libgcrypt20
Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20-dbg libgcrypt20 libgcrypt20-udeb libgcrypt11-dev
Built-For-Profiles: nocheck
Architecture: source all amd64
Version: 1.6.3-2+deb8u6
Distribution: jessie-security
Urgency: high
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
libgcrypt11-dev - transitional libgcrypt11-dev package
libgcrypt20 - LGPL Crypto library - runtime library
libgcrypt20-dbg - LGPL Crypto library - debugger files
libgcrypt20-dev - LGPL Crypto library - development files
libgcrypt20-doc - LGPL Crypto library - documentation
libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb)
Closes: 938938
Changes:
libgcrypt20 (1.6.3-2+deb8u6) jessie-security; urgency=high
.
* CVE-2019-13627: Add mitigation against an ECDSA timing attack.
(Closes: 938938)
Checksums-Sha1:
05935fbee9900ada08319cdd1c46641bdc964c6a 2587 libgcrypt20_1.6.3-2+deb8u6.dsc
9456e7b64db9df8360a1407a38c8c958da80bbf1 2494052 libgcrypt20_1.6.3.orig.tar.bz2
a08c8949c0396a821972356e51d7cbbfe8ffac56 36888 libgcrypt20_1.6.3-2+deb8u6.debian.tar.xz
90d48c05c828ae794e4eab3aa22ca0d2a5e228f3 65450 libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u6_all.deb
82c89ff892217a704a73ea23775d3cd94523828c 679292 libgcrypt20-doc_1.6.3-2+deb8u6_all.deb
f6a2f9786a3d1d5e6b4438687b0efe88ee06813a 438870 libgcrypt20-dev_1.6.3-2+deb8u6_amd64.deb
2dad86405bb0d16f567e0269d9bfc5a6572bcb1d 656784 libgcrypt20-dbg_1.6.3-2+deb8u6_amd64.deb
d3141b53eefe209856dc12b36c2a53fcf67a963c 392454 libgcrypt20_1.6.3-2+deb8u6_amd64.deb
7866983bb2965cd583b97706f84064ce61be2c41 306244 libgcrypt20-udeb_1.6.3-2+deb8u6_amd64.udeb
Checksums-Sha256:
8fbe77a2f3488a6a83949e09945315656ea329a549b53b26302411d3b573c637 2587 libgcrypt20_1.6.3-2+deb8u6.dsc
41b4917b93ae34c6a0e2127378d7a4d66d805a2a86a09911d4f9bd871db7025f 2494052 libgcrypt20_1.6.3.orig.tar.bz2
907a41d02e16c6f8aff7331a9874a7fcf6cb1d9adccad962fcf32d8845b0d425 36888 libgcrypt20_1.6.3-2+deb8u6.debian.tar.xz
273f789c2d000bf687bbec1310ad0c9ee99d74691fd7cbf7d08690a9ff02a6cc 65450 libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u6_all.deb
02cc263a9c1d7b48fcadfea72ff6cbaa7e1b4a4b7fe68bab89ec9414ae86072d 679292 libgcrypt20-doc_1.6.3-2+deb8u6_all.deb
836aeada8e88f76014ba4709da914fc756334251ba10bc019475aeec81809bd7 438870 libgcrypt20-dev_1.6.3-2+deb8u6_amd64.deb
0a3b90af42266f48273c30385f8bb9b9c02a042ea6d85108f7fb667073fac3bf 656784 libgcrypt20-dbg_1.6.3-2+deb8u6_amd64.deb
5a5cf8fe732b2016d57104cedd331384fb8741ae6c4397974f1fe5c13c05ca04 392454 libgcrypt20_1.6.3-2+deb8u6_amd64.deb
11687c8c5e012fee0eebb754643f395d3fee11dbc5d0ec4c636caeddf1971be8 306244 libgcrypt20-udeb_1.6.3-2+deb8u6_amd64.udeb
Files:
95398b72e94632d9f39d03625978595a 2587 libs optional libgcrypt20_1.6.3-2+deb8u6.dsc
4262c3aadf837500756c2051a5c4ae5e 2494052 libs optional libgcrypt20_1.6.3.orig.tar.bz2
4f93bfc06ac808fa70393107309bfb13 36888 libs optional libgcrypt20_1.6.3-2+deb8u6.debian.tar.xz
a60b84c5143c90e4da69d937d82c0a1f 65450 oldlibs extra libgcrypt11-dev_1.5.4-3+really1.6.3-2+deb8u6_all.deb
7bbb6139a594c6dc1068ecf442eddbb8 679292 doc optional libgcrypt20-doc_1.6.3-2+deb8u6_all.deb
10b6ca0a6c2e167fa4d5a0ec3ffd8808 438870 libdevel optional libgcrypt20-dev_1.6.3-2+deb8u6_amd64.deb
a1139be9594adfd5c8e6777b529717f6 656784 debug extra libgcrypt20-dbg_1.6.3-2+deb8u6_amd64.deb
7e2052d6bac52220109e8882b98b9896 392454 libs standard libgcrypt20_1.6.3-2+deb8u6_amd64.deb
5723ffde2862a3fa2f553d870e1a40be 306244 debian-installer optional libgcrypt20-udeb_1.6.3-2+deb8u6_amd64.udeb
-----BEGIN PGP SIGNATURE-----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=yZ0J
-----END PGP SIGNATURE-----