[ubuntu/jammy-proposed] libgcrypt20 1.9.4-3ubuntu1 (Accepted)

Mon Nov 1 16:14:12 UTC 2021

libgcrypt20 (1.9.4-3ubuntu1) jammy; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - Disable the library reading /proc/sys/crypto/fips_enabled file
      and going into FIPS mode. libgcrypt is not a FIPS certified library.
      (LP 1748310)
  * Drop CVE and CET patches, applied in Debian or upstreamed.
  * Cherry-pick one more patch from master to correctly enable assembly
    CET.

libgcrypt20 (1.9.4-3) unstable; urgency=medium

  * Fix libgcrypt-config wrapper to use 'command -v' instead of 'which'.
    (Thanks, Emmanuel Bouthenot)
    Closes: #993244

libgcrypt20 (1.9.4-2) unstable; urgency=medium

  * Upload to unstable.

libgcrypt20 (1.9.4-1) experimental; urgency=medium

  * New upstream release. (Also includes fix for Elgamal encryption for
    other implementations. CVE-2021-33560)

libgcrypt20 (1.9.3-1) experimental; urgency=medium

  * New upstream release.

libgcrypt20 (1.9.2-1) experimental; urgency=low

  * New upstream release.

libgcrypt20 (1.9.2~beta16-1) experimental; urgency=low

  * Simplify ./configure for Windows build, do not disable optimization and
    assembly, set timestamp=$(SOURCE_DATE_EPOCH) instead of disabling the
    timestamp.
  * New upstream release.
    + Drop 30_Revert-Define-HW-feature-flags-per-architecture.patch.

libgcrypt20 (1.9.1-1) experimental; urgency=low

  * Add Bug-Database and Bug-Submit to upstream/metadata.
  * New upstream version.
    + Fixes heap buffer overflow introduced in 1.9.0.
      https://dev.gnupg.org/T5275. CVE-2021-3345 Closes: #981336
  * 30_Revert-Define-HW-feature-flags-per-architecture.patch Fix w* build
    error.

libgcrypt20 (1.9.0-1) experimental; urgency=low

  * New upstream version.
   + Drop 13_lessdeps_libgcrypt-pkgconfig.diff
   + Update 25_norevisionfromgit.diff.
   + List new symbols, bump all version requirements in libgcrypt20.symbols.
     (New args for gcry_control, new algorithms.)
   + Update copyright file.
   + Update algorithm list in package descriptions.

libgcrypt20 (1.8.7-6) unstable; urgency=medium

  * Update from LIBGCRYPT-1.8-BRANCH:
    + 30_10-cipher-Fix-ElGamal-encryption-for-other-implementati.patch
      CVE-2021-33560

Date: Mon, 01 Nov 2021 14:26:05 +0000
Changed-By: Dimitri John Ledkov <dimitri.ledkov at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libgcrypt20/1.9.4-3ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 01 Nov 2021 14:26:05 +0000
Source: libgcrypt20
Built-For-Profiles: noudeb
Architecture: source
Version: 1.9.4-3ubuntu1
Distribution: jammy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Dimitri John Ledkov <dimitri.ledkov at canonical.com>
Closes: 981336 993244
Changes:
 libgcrypt20 (1.9.4-3ubuntu1) jammy; urgency=medium
 .
   * Merge from Debian unstable. Remaining changes:
     - Disable the library reading /proc/sys/crypto/fips_enabled file
       and going into FIPS mode. libgcrypt is not a FIPS certified library.
       (LP 1748310)
   * Drop CVE and CET patches, applied in Debian or upstreamed.
   * Cherry-pick one more patch from master to correctly enable assembly
     CET.
 .
 libgcrypt20 (1.9.4-3) unstable; urgency=medium
 .
   * Fix libgcrypt-config wrapper to use 'command -v' instead of 'which'.
     (Thanks, Emmanuel Bouthenot)
     Closes: #993244
 .
 libgcrypt20 (1.9.4-2) unstable; urgency=medium
 .
   * Upload to unstable.
 .
 libgcrypt20 (1.9.4-1) experimental; urgency=medium
 .
   * New upstream release. (Also includes fix for Elgamal encryption for
     other implementations. CVE-2021-33560)
 .
 libgcrypt20 (1.9.3-1) experimental; urgency=medium
 .
   * New upstream release.
 .
 libgcrypt20 (1.9.2-1) experimental; urgency=low
 .
   * New upstream release.
 .
 libgcrypt20 (1.9.2~beta16-1) experimental; urgency=low
 .
   * Simplify ./configure for Windows build, do not disable optimization and
     assembly, set timestamp=$(SOURCE_DATE_EPOCH) instead of disabling the
     timestamp.
   * New upstream release.
     + Drop 30_Revert-Define-HW-feature-flags-per-architecture.patch.
 .
 libgcrypt20 (1.9.1-1) experimental; urgency=low
 .
   * Add Bug-Database and Bug-Submit to upstream/metadata.
   * New upstream version.
     + Fixes heap buffer overflow introduced in 1.9.0.
       https://dev.gnupg.org/T5275. CVE-2021-3345 Closes: #981336
   * 30_Revert-Define-HW-feature-flags-per-architecture.patch Fix w* build
     error.
 .
 libgcrypt20 (1.9.0-1) experimental; urgency=low
 .
   * New upstream version.
    + Drop 13_lessdeps_libgcrypt-pkgconfig.diff
    + Update 25_norevisionfromgit.diff.
    + List new symbols, bump all version requirements in libgcrypt20.symbols.
      (New args for gcry_control, new algorithms.)
    + Update copyright file.
    + Update algorithm list in package descriptions.
 .
 libgcrypt20 (1.8.7-6) unstable; urgency=medium
 .
   * Update from LIBGCRYPT-1.8-BRANCH:
     + 30_10-cipher-Fix-ElGamal-encryption-for-other-implementati.patch
       CVE-2021-33560
Checksums-Sha1:
 438998a6ef12267ddca2f8191e654b4551dfa852 2907 libgcrypt20_1.9.4-3ubuntu1.dsc
 1bccc8393482fa1953323ff429c6b5ba5676eb1a 3239704 libgcrypt20_1.9.4.orig.tar.bz2
 5e9544f6a08ae92c9142f8e70dae3a99b13f83cc 228 libgcrypt20_1.9.4.orig.tar.bz2.asc
 011a540b2d67efc1395d92c66ff5e2730ac9dace 34296 libgcrypt20_1.9.4-3ubuntu1.debian.tar.xz
 fc48324d02b6956a0a089aaab5354d2b5f43ba98 8713 libgcrypt20_1.9.4-3ubuntu1_source.buildinfo
Checksums-Sha256:
 8f8e07816e0734590a7afc22f5cbd9258167564269d1868d49a098e63f7d33b4 2907 libgcrypt20_1.9.4-3ubuntu1.dsc
 ea849c83a72454e3ed4267697e8ca03390aee972ab421e7df69dfe42b65caaf7 3239704 libgcrypt20_1.9.4.orig.tar.bz2
 aa44cb00b779b4e75f3e63abeedd4112b10b4b92914dad8f23438fd0217a9fec 228 libgcrypt20_1.9.4.orig.tar.bz2.asc
 1d67cf4f07fb09bd76b2627c12e98cca28459c31e9b243e453cf085d0d2157cc 34296 libgcrypt20_1.9.4-3ubuntu1.debian.tar.xz
 dc396aca9a469b94bcd48e1a4489a12a25c86267ca0ef82950a3279998c430b2 8713 libgcrypt20_1.9.4-3ubuntu1_source.buildinfo
Files:
 c1e0d6256b6295ba9ccd0c9f6874e7f9 2907 libs optional libgcrypt20_1.9.4-3ubuntu1.dsc
 edc7becfe09c75d8f95ff7623e40c52e 3239704 libs optional libgcrypt20_1.9.4.orig.tar.bz2
 3870f2c741a18c9a4894480772975594 228 libs optional libgcrypt20_1.9.4.orig.tar.bz2.asc
 7930918ac5309d278f07acfb3337cafd 34296 libs optional libgcrypt20_1.9.4-3ubuntu1.debian.tar.xz
 735c8257e6c347ead2c18a420993dfcc 8713 libs optional libgcrypt20_1.9.4-3ubuntu1_source.buildinfo
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint at lists.alioth.debian.org>