[ubuntu/cosmic-proposed] libgcrypt20 1.8.3-1ubuntu1 (Accepted)

[Julian Andres Klode]

libgcrypt20 (1.8.3-1ubuntu1) cosmic; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Disable the library reading /proc/sys/crypto/fips_enabled file
      and going into FIPS mode. libgcrypt is not a FIPS certified library.
      (LP 1748310)

libgcrypt20 (1.8.3-1) unstable; urgency=high

  * [lintian] Fix spelling-error-in-patch-description in
    15_multiarchpath_in_-L.diff.
  * New upstream version.
    + Use blinding for ECDSA signing to mitigate a novel side-channel
      attack.  CVE-2018-0495
  * [lintian] Delete trailing empty lines in changelog.

Date: Tue, 10 Jul 2018 14:00:16 +0200
Changed-By: Julian Andres Klode <juliank at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libgcrypt20/1.8.3-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 10 Jul 2018 14:00:16 +0200
Source: libgcrypt20
Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20 libgcrypt20-udeb libgcrypt11-dev libgcrypt-mingw-w64-dev
Architecture: source
Version: 1.8.3-1ubuntu1
Distribution: cosmic
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Julian Andres Klode <juliank at ubuntu.com>
Description:
 libgcrypt-mingw-w64-dev - LGPL Crypto library - Windows development
 libgcrypt11-dev - transitional libgcrypt11-dev package
 libgcrypt20 - LGPL Crypto library - runtime library
 libgcrypt20-dev - LGPL Crypto library - development files
 libgcrypt20-doc - LGPL Crypto library - documentation
 libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb)
Changes:
 libgcrypt20 (1.8.3-1ubuntu1) cosmic; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
     - Disable the library reading /proc/sys/crypto/fips_enabled file
       and going into FIPS mode. libgcrypt is not a FIPS certified library.
       (LP 1748310)
 .
 libgcrypt20 (1.8.3-1) unstable; urgency=high
 .
   * [lintian] Fix spelling-error-in-patch-description in
     15_multiarchpath_in_-L.diff.
   * New upstream version.
     + Use blinding for ECDSA signing to mitigate a novel side-channel
       attack.  CVE-2018-0495
   * [lintian] Delete trailing empty lines in changelog.
Checksums-Sha1:
 96cd5cb80881b6fa5ed240e67e6593b1d75ac55c 2999 libgcrypt20_1.8.3-1ubuntu1.dsc
 13bd2ce69e59ab538e959911dfae80ea309636e3 2989166 libgcrypt20_1.8.3.orig.tar.bz2
 4e0610ba5d45eca951573fa7f62eacefcb27d60b 534 libgcrypt20_1.8.3.orig.tar.bz2.asc
 cdd783e5775e6dbd8fea365d653ff399e2e2161d 29464 libgcrypt20_1.8.3-1ubuntu1.debian.tar.xz
 ba60d3aaa7fcd08395adac8d61387f9b4061a230 6590 libgcrypt20_1.8.3-1ubuntu1_source.buildinfo
Checksums-Sha256:
 d56e3b9142c80d7655aaa5b4fec9a58406cba048100350748ea5b686e58957d2 2999 libgcrypt20_1.8.3-1ubuntu1.dsc
 66ec90be036747602f2b48f98312361a9180c97c68a690a5f376fa0f67d0af7c 2989166 libgcrypt20_1.8.3.orig.tar.bz2
 f3e70e2988f223dc2ac70ff51323fd8a99a5e32b9cc24ef193d347892c559f2c 534 libgcrypt20_1.8.3.orig.tar.bz2.asc
 7b6fa274fee4a759846f0c7ef8e8e81d2fe323b9c246100f2b291c9a31f7bacf 29464 libgcrypt20_1.8.3-1ubuntu1.debian.tar.xz
 1b8f6491529b85e88359a042b377dcbe678ed13cbb0ffd085bf40eb07d12fc6a 6590 libgcrypt20_1.8.3-1ubuntu1_source.buildinfo
Files:
 b4c3d8ead4d4eaee4275572d5af7af9f 2999 libs optional libgcrypt20_1.8.3-1ubuntu1.dsc
 3139c2402e844985a67fb288a930534d 2989166 libs optional libgcrypt20_1.8.3.orig.tar.bz2
 59113fd8990da2a300f012431fc605e9 534 libs optional libgcrypt20_1.8.3.orig.tar.bz2.asc
 164977b192b1bd9f5c1a2c22367364af 29464 libs optional libgcrypt20_1.8.3-1ubuntu1.debian.tar.xz
 7bc4bee5516fbcc2e824a21de51a4597 6590 libs optional libgcrypt20_1.8.3-1ubuntu1_source.buildinfo
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=vofH
-----END PGP SIGNATURE-----