Accepted gnupg 1.4.10-4+squeeze7 (source amd64) into squeeze-lts
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 17 Mar 2015 10:46:14 +0000
Source: gnupg
Binary: gnupg gnupg-curl gpgv gnupg-udeb gpgv-udeb
Architecture: source amd64
Version: 1.4.10-4+squeeze7
Distribution: squeeze-lts
Urgency: low
Maintainer: Debian GnuPG-Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>
Changed-By: Raphaël Hertzog <hertzog@debian.org>
Description:
gnupg - GNU privacy guard - a free PGP replacement
gnupg-curl - GNU privacy guard - a free PGP replacement (cURL)
gnupg-udeb - GNU privacy guard - a free PGP replacement (udeb)
gpgv - GNU privacy guard - signature verification tool
gpgv-udeb - minimal signature verification tool (udeb)
Changes:
gnupg (1.4.10-4+squeeze7) squeeze-lts; urgency=low
.
* Split CVE-2013-4576.dpatch in two to fixup debian/rules unpatch.
* Add patches for following issues:
CVE-2014-3591: Use ciphertext blinding for Elgamal decryption to
counteract a side-channel attack
CVE-2015-0837: Fix data-dependent timing variations in the modular
exponentiation function that could be used to mount a side-channel attack
CVE-2015-1606: Fix a use-after-free when importing a garbled keyring file
Checksums-Sha1:
8bb6317ab01e86ba53ecde3521e3280d9ddd18de 1757 gnupg_1.4.10-4+squeeze7.dsc
e5df3f2e2122ac4fbd40cd02b8431efde795a5b2 55910 gnupg_1.4.10-4+squeeze7.diff.gz
62ca626b2864b1c75259208ab22b7c89c925fe50 2151524 gnupg_1.4.10-4+squeeze7_amd64.deb
12d7d4dbadb8bf981ec7e23791237a7c88a95989 75176 gnupg-curl_1.4.10-4+squeeze7_amd64.deb
318d91b53b0255ea69554ed1b25de318132ddae3 223934 gpgv_1.4.10-4+squeeze7_amd64.deb
3e7d61830431dc26bb12933aae8f9cbf4f9ea9ed 414930 gnupg-udeb_1.4.10-4+squeeze7_amd64.udeb
fc96c358a3172c93c2a2a1483dcee027bd08e553 150802 gpgv-udeb_1.4.10-4+squeeze7_amd64.udeb
Checksums-Sha256:
4824f451519e86b59c379620319fe8f6ecf84d021e65cdfe546d58445398384c 1757 gnupg_1.4.10-4+squeeze7.dsc
edf485f940c37f92b5711f8d99d222a1f529e2fa7f8265af6aab5d04d04e6125 55910 gnupg_1.4.10-4+squeeze7.diff.gz
8108c5632111173aab81f5f7ba693ef9296e29b3d78fb48714c84fb1ed6d03d1 2151524 gnupg_1.4.10-4+squeeze7_amd64.deb
3e312f2a2d5b6e470c4328e5496d4f3db57be0d83d9c49cdf9e189d6b2711e9a 75176 gnupg-curl_1.4.10-4+squeeze7_amd64.deb
a7fa0051b0031015a120470de2078b4bbb1bd46f710f2ce3c9964221b2b7d886 223934 gpgv_1.4.10-4+squeeze7_amd64.deb
e9445c1d4aa34a4faa25b29706dd974a30dec11452fb85134096b5e1dfadbd00 414930 gnupg-udeb_1.4.10-4+squeeze7_amd64.udeb
49ef9e515d2d08628c8d9f8b54fa7e5d3aff516a371fc87c4465f423bb05d92f 150802 gpgv-udeb_1.4.10-4+squeeze7_amd64.udeb
Files:
c8b8e979ac76494a7f7ca02f1c711ed6 1757 utils important gnupg_1.4.10-4+squeeze7.dsc
283aec1925ee9f20a2bfb895cb4b0444 55910 utils important gnupg_1.4.10-4+squeeze7.diff.gz
f4ccad772ed5e786fe510db2e3ce5425 2151524 utils important gnupg_1.4.10-4+squeeze7_amd64.deb
c3441ba5198f92f2b9285dbf1cb9ac81 75176 utils optional gnupg-curl_1.4.10-4+squeeze7_amd64.deb
a97467ebd1b49d653699b05f2db871b3 223934 utils important gpgv_1.4.10-4+squeeze7_amd64.deb
bd1238c394653da2705bd1b941bf9359 414930 debian-installer extra gnupg-udeb_1.4.10-4+squeeze7_amd64.udeb
497a404fc087cc54af8262557d01c549 150802 debian-installer extra gpgv-udeb_1.4.10-4+squeeze7_amd64.udeb
Package-Type: udeb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Signed by Raphael Hertzog
iQEcBAEBCAAGBQJVCBPjAAoJEAOIHavrwpq5/ZEIAITA81FGaP0ua/EyESLNUJqA
gJfLt6gSWsZrUxbl8Je5n0h/XUmDXvIlPSjoJxbRv68WLNvljPf3dwKbYN4GgSLP
MlTipCuzURsWnSV0s3e209oFlCWJU1MAXR9dOnzIWCKLTXSfIWnjpL6T0M01NHse
iYiFdXh5F0BzSpq0+m+y5OdKVYViUq5H0SHMh2hmQXTFr88X8T4Y6EVpFbwBFi2q
unxsXZ5TkZVB4uBqTGOUThraAJh7OGz8p09cV1b+IsDQpZ0WkU3Lzjy8d9x1WbNd
H37uuUQtfGycItoK6i4ZVsIIzojvzknoFLlja05E/zhRkKhGTmqvTZg9x1wDdp0=
=yf2z
-----END PGP SIGNATURE-----
Reply to: