-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 13 Sep 2019 15:54:40 +1000 Source: golang-go.crypto Binary: golang-go.crypto-dev Architecture: source all Version: 0.0~hg190-1+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Tonnerre Lombard <tonne...@ancient-solutions.com> Changed-By: Brian May <b...@debian.org> Description: golang-go.crypto-dev - Supplementary Go cryptography libraries Changes: golang-go.crypto (0.0~hg190-1+deb8u2) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2019-11841 Add protection for spoofed GPG Hash header. * Include patch to fix infinite loop on malformed GPG input. Checksums-Sha1: c48e1dcfbf1628d021e195bca16354fd4520d79e 2046 golang-go.crypto_0.0~hg190-1+deb8u2.dsc 030d6fb5ba4c97f192d6cafdec3f5d8b0c5b3374 298703 golang-go.crypto_0.0~hg190.orig.tar.gz c8d08f0cc33f63674c31dbb5f614da81916e96b8 6972 golang-go.crypto_0.0~hg190-1+deb8u2.debian.tar.xz 25b305c69bbf0965ecb188b55ab1578a84593262 244598 golang-go.crypto-dev_0.0~hg190-1+deb8u2_all.deb Checksums-Sha256: 238a2f9dc772657bda9448dd25720d3bafd1ac3d652a5d031e76916838c66a11 2046 golang-go.crypto_0.0~hg190-1+deb8u2.dsc 60c26162d00df7e4201ab8df4158572b7acf074a27d11d168be7178cf4ba4ce0 298703 golang-go.crypto_0.0~hg190.orig.tar.gz 1d324177da40b3ebfd79e733313bf3821a9347e1f1d7ad4130111c721b4c5a09 6972 golang-go.crypto_0.0~hg190-1+deb8u2.debian.tar.xz ad0d8277446e114426a9d4cab27e536bce79a9a6af722542e371de4fca0994e9 244598 golang-go.crypto-dev_0.0~hg190-1+deb8u2_all.deb Files: 60da80d153a3c0f25c2e84c9ae6161b4 2046 devel extra golang-go.crypto_0.0~hg190-1+deb8u2.dsc a73ccf3329769910eae9970ce01f5889 298703 devel extra golang-go.crypto_0.0~hg190.orig.tar.gz 39a0f172a8c7c6351a8e207c7607cdca 6972 devel extra golang-go.crypto_0.0~hg190-1+deb8u2.debian.tar.xz 61063e1a262963272abdb0807fa1e06a 244598 devel extra golang-go.crypto-dev_0.0~hg190-1+deb8u2_all.deb
-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEKpwfR8DOwu5vyB4TKpJZkldkSvoFAl17L6IACgkQKpJZkldk SvpgUg/+LLydvfrANw137OdBpJeaDjLHVUhVzzBbF71fRdYzKfPToM37uInbUhAV o8tXzhk7nT3dubkA2aBYY7oT5PiBmKkCPerAuJcREjS3iEUK58x5a7CC4ehxAa9Y DMYC4H/QEmEMR7JFQ11MgWGP7uTSgwCYQkigFLAgxOyVVI2n1jGbCZ7AHEkzm7bP 5Dy4PL1Cia0It++iRvLlQXaGF5NNAdcZipB2c5TIFK2z93lu4UXQ/DkGk3QX6Ymp eUFAFsWFCwH5FrgpNNvpuRHZNoDgYB6eJX41aAGwDkFs1UxbppC1hIQmIUU2eRV2 iZrpxbjb4tM5dlLwT7I4x3WLyoUR4miNLgQjcLfoZkV1BR9R/IgsFkuWKTSv93VI 7KTn+F8c52bCpOcIUId9Y1wX1ouXKYaiJeNizeeDtEDAuFVvQD+vuVhiV2mCTUG6 tWg/b9idMz8I87ig+WZx6jFLVCsBAPqcw/urwNkzW0pCJNxcl0stxDfwSmgwBS2k HTl0zertbQJySijomhcU7F6dZ7hy6CpYpQOkPfcVcTd/su0qj4EvWph+Kafx2FgW Bfjq+NrWbcbw/YCBaLrZ0g5TPdw0Td5aaE2ORWaTwJpTvXQwIY9MuG6wSySDMxVN EN83VlzKQmns9D0YBDQBJQFZ91SuYSCgzqknWnu/Zpowi/9E+ks= =4mq0 -----END PGP SIGNATURE-----