Format: 1.8 Date: Thu, 17 Sep 2020 09:57:57 -0400 Source: gnupg2 Binary: gpgconf gnupg-agent gpg-agent gpg-wks-server gpg-wks-client scdaemon gpgsm gpg gnupg gnupg2 gpgv gpgv2 dirmngr gpgv-udeb gpgv-static gpgv-win32 gnupg-l10n gnupg-utils Architecture: s390x s390x_translations Version: 2.2.4-1ubuntu1.3 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dirmngr - GNU privacy guard - network certificate management service gnupg - GNU privacy guard - a free PGP replacement gnupg-agent - GNU privacy guard - cryptographic agent (dummy transitional packa gnupg-l10n - GNU privacy guard - localization files gnupg-utils - GNU privacy guard - utility programs gnupg2 - GNU privacy guard - a free PGP replacement (dummy transitional pa gpg - GNU Privacy Guard -- minimalist public key operations gpg-agent - GNU privacy guard - cryptographic agent gpg-wks-client - GNU privacy guard - Web Key Service client gpg-wks-server - GNU privacy guard - Web Key Service server gpgconf - GNU privacy guard - core configuration utilities gpgsm - GNU privacy guard - S/MIME version gpgv - GNU privacy guard - signature verification tool gpgv-static - minimal signature verification tool (static build) gpgv-udeb - minimal signature verification tool (udeb) gpgv-win32 - GNU privacy guard - signature verification tool (win32 build) gpgv2 - GNU privacy guard - signature verification tool (dummy transition scdaemon - GNU privacy guard - smart card support Changes: gnupg2 (2.2.4-1ubuntu1.3) bionic-security; urgency=medium . * SECURITY UPDATE: signature collisions via insecure SHA-1 algorithm - debian/patches/CVE-2019-14855-1.patch: reject certain SHA-1 based signatures in g10/sig-check.c. - debian/patches/CVE-2019-14855-2.patch: add new option --allow-weak-key-signatures in doc/gpg.texi, g10/gpg.c, g10/main.h, g10/misc.c, g10/options.h, g10/sig-check.c. - debian/patches/CVE-2019-14855-3.patch: forbid the creation of SHA-1 third-party key signatures in g10/sign.c. - debian/patches/CVE-2019-14855-4.patch: adjust tests for now invalid SHA-1 key signatures in tests/openpgp/defs.scm. - CVE-2019-14855 Checksums-Sha1: cc6d5b6610638cfdf40aac6b9fe72223da01806f 943748 dirmngr-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 2738214b3148bed9551e15c508699f48274b8bf6 296320 dirmngr_2.2.4-1ubuntu1.3_s390x.deb a9deea513f7841b220afe6dce5486ec4e731c187 492964 gnupg-utils-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb a14fc3acfc7d3f93f3078bd591593a9b6c94f3c9 118656 gnupg-utils_2.2.4-1ubuntu1.3_s390x.deb dbcc00351279ab4998eaafb2eaa37d6db1c1b6f6 18942 gnupg2_2.2.4-1ubuntu1.3_s390x.buildinfo d3e3ded1ba2562b0b38d85805c7a8a23050fd583 2306900 gnupg2_2.2.4-1ubuntu1.3_s390x_translations.tar.gz 7c83bcce4967207e3d99a1170e933b58f7ef6390 249168 gnupg_2.2.4-1ubuntu1.3_s390x.deb f5290fe352e9a5aea4f17a614532920599218db7 987476 gpg-agent-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 2957626761234d15dcb87fe893f644203ece0b3a 207572 gpg-agent_2.2.4-1ubuntu1.3_s390x.deb cac0c30ee684fa7fbeedefa1fea67b08b815593a 1368596 gpg-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb d467a0d12e62e7416a0f3526ed31df0df4fb9bcf 282764 gpg-wks-client-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb fac6c780348b4c06d4b18bc412b3c8c337a6c004 86192 gpg-wks-client_2.2.4-1ubuntu1.3_s390x.deb 2f52d0f855018a10e9a538b87ed60c49f5f2d2a1 255064 gpg-wks-server-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 2321078c56fd3cc1162ebb6a278a9cc2671437f2 80016 gpg-wks-server_2.2.4-1ubuntu1.3_s390x.deb 1c3dc64caae9e88bbce2f40444c153d7016dc77d 425476 gpg_2.2.4-1ubuntu1.3_s390x.deb 47fa33ae74b21af97bcbe463f716c049ec3edb68 363944 gpgconf-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 0037dea20cdf10564a2bd12dcf50e893f941bc76 115560 gpgconf_2.2.4-1ubuntu1.3_s390x.deb dd10d40edd40e448868024215481e2bff1c690df 621912 gpgsm-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb a271a3c374be5b10bd59d10034e809cb9aeb81d7 196444 gpgsm_2.2.4-1ubuntu1.3_s390x.deb e3a76b05f0ed9e77d338486988d49128b0b24c79 629984 gpgv-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb cc4b4a26bd618078fae6e5925aaaa579ee8d5d92 664988 gpgv-static-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb e41eae4642a66e37bd7ca497f5ec2eca4adec631 760340 gpgv-static_2.2.4-1ubuntu1.3_s390x.deb 70c8fb1a20250cbfcd4821122d36fdf133c3f3aa 172272 gpgv-udeb_2.2.4-1ubuntu1.3_s390x.udeb b98cc245057efb8e1c921bf8268d063793f7a6c9 181808 gpgv_2.2.4-1ubuntu1.3_s390x.deb 669ed08d7f190ed5eb92100ec7799bad71c4bcd1 487800 scdaemon-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 146893e298e10c1e744c84767b403ebdf2c259c6 168816 scdaemon_2.2.4-1ubuntu1.3_s390x.deb Checksums-Sha256: 548a12fbab3c6edf1589cf6ff0281b030afa030e154cb1522e2d3b58356377f4 943748 dirmngr-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb e91b763e2b9c83f0278c97d222fdae0e03a4f417b235d09a0835ccc5692f2d4b 296320 dirmngr_2.2.4-1ubuntu1.3_s390x.deb 70f62d09daaaf31ffbecaf230a50dd00b96b0d06484b538b49a544676cdd9502 492964 gnupg-utils-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 3240daf5a293a2f4090e9206064fb19b096db5014a930710d2caab6fa097102a 118656 gnupg-utils_2.2.4-1ubuntu1.3_s390x.deb 5ca9454f484aee9c1c2fbc0821bb18e41ea96f525e7b89d8bb04fbcd5eb7d87e 18942 gnupg2_2.2.4-1ubuntu1.3_s390x.buildinfo d08e452bf0b65abab650f3419dd4243ec90aa8f8beeefa61b4849ca7aef97494 2306900 gnupg2_2.2.4-1ubuntu1.3_s390x_translations.tar.gz 801dc30dfea8c0630f3468e46d14b514591efdaa1557836fc4220964b5c2d462 249168 gnupg_2.2.4-1ubuntu1.3_s390x.deb b2d6bbb77dea3381a897ebdd94b362c491920e0a0b56ec5dbbc7b7982da63ade 987476 gpg-agent-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb f7ab79edd27fdabcb61007a5baca8d94390ccb922f0e7686227d718229439d26 207572 gpg-agent_2.2.4-1ubuntu1.3_s390x.deb 1302b41f9e99c208aefee21bd0a254d38c348ffdcbee6f50c5def9928652d0d5 1368596 gpg-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 7f6d4d31637fd5aa11995ba7c2b27d065cd8fab6cbe5864836288ac7bf2cae27 282764 gpg-wks-client-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 1552b37d2763382ab787b1f23d93b57c520b950bb427a1165c1c9c2d217983d8 86192 gpg-wks-client_2.2.4-1ubuntu1.3_s390x.deb 070f8c4102e03a67dbfbdf275865efc647f484515bbeb3a61aa75aecc3ad3f89 255064 gpg-wks-server-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb fac97104a8a15aa663968e70512b79ab43404dfa1cc221ccc1afbd206bafb8f5 80016 gpg-wks-server_2.2.4-1ubuntu1.3_s390x.deb 8a670d8c3ba3aa71298db7bbe82dc9f188004d55e2776d039b33399a287b3906 425476 gpg_2.2.4-1ubuntu1.3_s390x.deb 2e894e2f35528b5a605b319069476d7c3cc1723d814fa081f252fd5aca147cbe 363944 gpgconf-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 56d7750fbdfa7eabbb17df37d68c38b370fc877eda5d9a2bf012ce2c8f3ce935 115560 gpgconf_2.2.4-1ubuntu1.3_s390x.deb be18c2fcda670a04209defe252a4dbd2cb2ce5ac55bf9692b80ee33406073b1c 621912 gpgsm-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 67b1517b9c81483ba19f5fdcb703319f2d9380d347deed09220efe0b8832628c 196444 gpgsm_2.2.4-1ubuntu1.3_s390x.deb e9bb29a943b13c050655628cb35e88c1af95052bb00278178d8890bd024432db 629984 gpgv-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 72c9bc8392d30214c34c26481576730419253cd0222f23adc884a18e0a1074b5 664988 gpgv-static-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 96437fc5c6ce9572ece856ad39d6ca9e8558ee240ddefadf7c5c4e9d3a15de35 760340 gpgv-static_2.2.4-1ubuntu1.3_s390x.deb 0526df8b469f7bc1f896af725d509fcfadeb6c671fa31d25c46f9924e1013828 172272 gpgv-udeb_2.2.4-1ubuntu1.3_s390x.udeb 769568e41455133f255a55bedf930ba9100008898c60bc11975ad262e5a6dfb0 181808 gpgv_2.2.4-1ubuntu1.3_s390x.deb 25930d368398eb366a71ecb5d68091b1f9cc9a3200bfa22b08fb88f0e59c3ef2 487800 scdaemon-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 2584f1a8dfaca145e8c80748ff4bec4bbc07f2b1ede5872e9b2f7ee0a9b69a0f 168816 scdaemon_2.2.4-1ubuntu1.3_s390x.deb Files: bec825c38f5af41b2683017f78caad65 943748 debug optional dirmngr-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 8b20af2d33dcdaba7838f536f4bee659 296320 utils optional dirmngr_2.2.4-1ubuntu1.3_s390x.deb cce1229b99d6369022005cf6f6078132 492964 debug optional gnupg-utils-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb edf1252ee18e6a0b3298326f4cbfa3d4 118656 utils optional gnupg-utils_2.2.4-1ubuntu1.3_s390x.deb 6d7d860c3ba1a652f4d8c06c44ddb19f 18942 utils optional gnupg2_2.2.4-1ubuntu1.3_s390x.buildinfo 216f5c63247b770bbb284ed0850fdaf9 2306900 raw-translations - gnupg2_2.2.4-1ubuntu1.3_s390x_translations.tar.gz 10f8485f6ee2bbc7b9c60debae489a4a 249168 utils optional gnupg_2.2.4-1ubuntu1.3_s390x.deb 4753fc8d2016af956a831fa9b019809d 987476 debug optional gpg-agent-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 322f941b42f014c18c670b2bcf9a1c79 207572 utils optional gpg-agent_2.2.4-1ubuntu1.3_s390x.deb 5fafa81aabb355bf461eb6fed2d25346 1368596 debug optional gpg-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb a8d10e71cfb0f2166f8df8400aa74217 282764 debug optional gpg-wks-client-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 0979a08c0242d61775d1fff18a9a9437 86192 utils optional gpg-wks-client_2.2.4-1ubuntu1.3_s390x.deb 466e67970fb14acd4352a273a108f8ba 255064 debug optional gpg-wks-server-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb aac8e05b0561d8b3f67d4b83270c388a 80016 utils optional gpg-wks-server_2.2.4-1ubuntu1.3_s390x.deb 61c2b9c674ceaaf9391cd532e6d58f6a 425476 utils optional gpg_2.2.4-1ubuntu1.3_s390x.deb c94f5bb20b6fdf752b8822a4cfbd3aaa 363944 debug optional gpgconf-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 718d50c1c748a6e02eab498ab9f75c0a 115560 utils optional gpgconf_2.2.4-1ubuntu1.3_s390x.deb 8b81cc689e20f7ba0a596c3914333011 621912 debug optional gpgsm-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 8adfe3cd2ffe01e54c7e232f4ee47883 196444 utils optional gpgsm_2.2.4-1ubuntu1.3_s390x.deb 4fa535e85b65dc2cd09f1d2d566bd0be 629984 debug optional gpgv-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb d50e9bae090f94b4305cfacf746117fe 664988 debug optional gpgv-static-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb 6e2b8e8de49dec3917710502f62cb1d8 760340 utils optional gpgv-static_2.2.4-1ubuntu1.3_s390x.deb f6e19ec78cfff1536aafced96ac26fcb 172272 debian-installer optional gpgv-udeb_2.2.4-1ubuntu1.3_s390x.udeb 4b5f9daedb76325fa0214e6a1b1f4fcf 181808 utils important gpgv_2.2.4-1ubuntu1.3_s390x.deb 780f6755cb6b883a9f80b2964729ef06 487800 debug optional scdaemon-dbgsym_2.2.4-1ubuntu1.3_s390x.ddeb a9cdcf3b1ee57ecb5569e6a65058b8d2 168816 utils optional scdaemon_2.2.4-1ubuntu1.3_s390x.deb Original-Maintainer: Debian GnuPG Maintainers