-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Jan 2026 06:46:01 +0100
Source: gnupg2
Binary: dirmngr dirmngr-dbgsym gnupg-utils gnupg-utils-dbgsym gpg gpg-agent gpg-agent-dbgsym gpg-dbgsym gpg-wks-client gpg-wks-client-dbgsym gpg-wks-server gpg-wks-server-dbgsym gpgconf gpgconf-dbgsym gpgsm gpgsm-dbgsym gpgv gpgv-dbgsym gpgv-static gpgv-static-dbgsym gpgv-udeb scdaemon scdaemon-dbgsym tpm2daemon tpm2daemon-dbgsym
Architecture: i386
Version: 2.4.7-21+deb13u1
Distribution: trixie
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 dirmngr    - GNU privacy guard - network certificate management service
 gnupg-utils - GNU privacy guard - utility programs
 gpg        - GNU Privacy Guard -- minimalist public key operations
 gpg-agent  - GNU privacy guard - cryptographic agent
 gpg-wks-client - GNU privacy guard - Web Key Service client
 gpg-wks-server - GNU privacy guard - Web Key Service server
 gpgconf    - GNU privacy guard - core configuration utilities
 gpgsm      - GNU privacy guard - S/MIME version
 gpgv       - GNU privacy guard - signature verification tool
 gpgv-static - minimal signature verification tool (static build)
 gpgv-udeb  - minimal signature verification tool (udeb)
 scdaemon   - GNU privacy guard - smart card support
 tpm2daemon - GNU privacy guard - TPM2 support
Closes: 1124221
Changes:
 gnupg2 (2.4.7-21+deb13u1) trixie; urgency=high
 .
   * Avoid potential downgrade to SHA1 in 3rd party key signatures.
     https://gpg.fail/sha1 #12
     Patch from STABLE-BRANCH-2-4
   * gpg: Error out on unverified output for non-detached signatures.
     https://gpg.fail/detached #1
     Patch from STABLE-BRANCH-2-4
   * gpg: Fix possible memory corruption in the armor parser (CVE-2025-68973)
     https://gpg.fail/memcpy #5
     Patch from STABLE-BRANCH-2-4 (Closes: #1124221)
   * gpg: Do not use a default when asking for another output filename.
     https://gpg.fail/filename #2
     Unfuzzed patch from GIT master
Checksums-Sha1:
 fd0d96fa4a86056f30c729ececff1cf83b9e755f 932400 dirmngr-dbgsym_2.4.7-21+deb13u1_i386.deb
 54bbe6ac84765933c7d68e732e3ae54b61970f53 410820 dirmngr_2.4.7-21+deb13u1_i386.deb
 7dcebfef37fd1bec70ec783f29f69160d147d2f9 689304 gnupg-utils-dbgsym_2.4.7-21+deb13u1_i386.deb
 4720eed60baf75e14802c4346a2cf2af4b3b3212 208260 gnupg-utils_2.4.7-21+deb13u1_i386.deb
 098f6ebe329177498393158d592c7c6b91597dce 19449 gnupg2_2.4.7-21+deb13u1_i386-buildd.buildinfo
 cde8c3c8b15489b19dbd55c3cc838749531c5e2f 857040 gpg-agent-dbgsym_2.4.7-21+deb13u1_i386.deb
 ed1873333dd890706ed81ec024113ad05e0942f6 290328 gpg-agent_2.4.7-21+deb13u1_i386.deb
 ddc959423f417c35f5fc1e2c0830b9712089baa4 1559688 gpg-dbgsym_2.4.7-21+deb13u1_i386.deb
 7d86faa4fb6b94152c497215ad5a01850f59a5e4 263112 gpg-wks-client-dbgsym_2.4.7-21+deb13u1_i386.deb
 886b23cbdcbe0382e3b2066aeb4cb826eb7d33c1 117540 gpg-wks-client_2.4.7-21+deb13u1_i386.deb
 b37f5c973a95558aee9194ec1f89a37bacc0c89e 232016 gpg-wks-server-dbgsym_2.4.7-21+deb13u1_i386.deb
 341feef99b5ee81ade320d88275768320acf23fd 103884 gpg-wks-server_2.4.7-21+deb13u1_i386.deb
 bc703fa067f461bb4be2895fd1be21a1dec90822 682752 gpg_2.4.7-21+deb13u1_i386.deb
 68540aaf3f11904474247b937607e35b31e7150d 306208 gpgconf-dbgsym_2.4.7-21+deb13u1_i386.deb
 adc2a912079cb77dedc73119daed2f617ca37073 135680 gpgconf_2.4.7-21+deb13u1_i386.deb
 268d656d8a9e6c39a49bb5ddb533b45d871776bf 645852 gpgsm-dbgsym_2.4.7-21+deb13u1_i386.deb
 f395b2ea6ca2b67c786ff552d8185893f6fae0e1 297252 gpgsm_2.4.7-21+deb13u1_i386.deb
 763691a9241b3ca11097da1a2a4775231a01956e 611728 gpgv-dbgsym_2.4.7-21+deb13u1_i386.deb
 4b1cf5ef5ef8c874bdc7c786397a4bd4bf2acc3c 669732 gpgv-static-dbgsym_2.4.7-21+deb13u1_i386.deb
 1be9190bf84f962e6232d17c0583717fcbe39f6e 1207240 gpgv-static_2.4.7-21+deb13u1_i386.deb
 f3ca717bff1c4c325349ba789d65e7b0dfff1ab7 242896 gpgv-udeb_2.4.7-21+deb13u1_i386.udeb
 4acd8d78bf179464dbc7bbc042a729b5e4cc70b8 262036 gpgv_2.4.7-21+deb13u1_i386.deb
 67fe70b0c0faa79219d6fef9c9e8a00d3d11dd09 969268 scdaemon-dbgsym_2.4.7-21+deb13u1_i386.deb
 3abde91d3536429b5b14234521511c59e4e7c07a 372132 scdaemon_2.4.7-21+deb13u1_i386.deb
 f2b5b833c01ae32321c3cc7145ec212b4f1e9443 176156 tpm2daemon-dbgsym_2.4.7-21+deb13u1_i386.deb
 f0262ea24185c33a2b1955a8d1f26a1c26383faa 75076 tpm2daemon_2.4.7-21+deb13u1_i386.deb
Checksums-Sha256:
 c0b8908e36cfbffcb154d5d12f8fcf54da12c77e056edd388e9dcdbbadfa3423 932400 dirmngr-dbgsym_2.4.7-21+deb13u1_i386.deb
 167fd6dc8dec799bb839b18237f8bf187cfab49be43bf85c84d74163597f2761 410820 dirmngr_2.4.7-21+deb13u1_i386.deb
 452b06937dc3c6231a6f22f8dab86514854562eec2f26c6aa0cd45a0141f59d5 689304 gnupg-utils-dbgsym_2.4.7-21+deb13u1_i386.deb
 64ef1eb68826e4b26787e0a24e9be559c21a3c1100f4be3c5ac9dc94b1f4c670 208260 gnupg-utils_2.4.7-21+deb13u1_i386.deb
 9b3b96c16e5261aa039d4d8f76350e75a5e4fb40754226935b6b52e4ac409ec2 19449 gnupg2_2.4.7-21+deb13u1_i386-buildd.buildinfo
 59c5628fa0329bb3770b5115122cf31974027e58fb9b643d855ca3ede1616dfc 857040 gpg-agent-dbgsym_2.4.7-21+deb13u1_i386.deb
 1abb46759407a169c92986ad122bad4b5ce972dddd95a42a14047591a662b0ae 290328 gpg-agent_2.4.7-21+deb13u1_i386.deb
 d2277451b8682042298dbc025304bd997f64e418e333f3377ddee558265e1318 1559688 gpg-dbgsym_2.4.7-21+deb13u1_i386.deb
 e41e3f47686f2fc04c7692219058ddd7e1d5a8eff7a39b9a729f59550ab715e4 263112 gpg-wks-client-dbgsym_2.4.7-21+deb13u1_i386.deb
 46138a72d9feca3c2f228ffd35edd067addab007d530aec730720079d9dc1456 117540 gpg-wks-client_2.4.7-21+deb13u1_i386.deb
 4415e74b0e824c330102071aad5f9ceab4f77171ef8d60e178d9ef9968bd61ae 232016 gpg-wks-server-dbgsym_2.4.7-21+deb13u1_i386.deb
 90cf35e629cdcd34683550ecc6759759bd6235981f69852abbc2e1aa8ad6823c 103884 gpg-wks-server_2.4.7-21+deb13u1_i386.deb
 f35a9d78eefb4aa3db195dca0f8b28fc33a7ad806e714ec94eedbe3f6cb42e76 682752 gpg_2.4.7-21+deb13u1_i386.deb
 c415ccb33522d86f99093d5edb600613629b9d7794033cc47d0989f6b41eb2a6 306208 gpgconf-dbgsym_2.4.7-21+deb13u1_i386.deb
 f9455102f2ea24f260a30e7884edc1d885aee06c5a3ae65ab8dde122cf5d0bc5 135680 gpgconf_2.4.7-21+deb13u1_i386.deb
 35b1ff11594cd621f8e718834e6b6cce3bc1e315e2a2d3119fc9d15b7c004cf7 645852 gpgsm-dbgsym_2.4.7-21+deb13u1_i386.deb
 2bcdcae4562556d551a7167fd45ce1b29fd7568d5675498447aa048c54e4354b 297252 gpgsm_2.4.7-21+deb13u1_i386.deb
 bed0f552437eb4305f9f3427c08d3377e2faeadbf1c521d64666aeb8e882dfbb 611728 gpgv-dbgsym_2.4.7-21+deb13u1_i386.deb
 c0ff077c66084f2c3e01f87be4a63d521153989e3898212f82996b2f75945c07 669732 gpgv-static-dbgsym_2.4.7-21+deb13u1_i386.deb
 0862fd524e6b4112fb0fa4aad3e550e98c0c84658754116c44ac3d4a91450f5f 1207240 gpgv-static_2.4.7-21+deb13u1_i386.deb
 cd68f0ecb058f56380b078965289e3b55bd666a6aaab198a6674d9dede57dc68 242896 gpgv-udeb_2.4.7-21+deb13u1_i386.udeb
 a013ffdb9b5a13a573cf48e9b8e1b031c5967d87b22298e9c46e7c5bcd7d7070 262036 gpgv_2.4.7-21+deb13u1_i386.deb
 b33ac8cc28d1c954aba9efc673e97cc2063378d32f832108f9957424ddaf3780 969268 scdaemon-dbgsym_2.4.7-21+deb13u1_i386.deb
 a5eb8b674221f8a0e79eaaa24850f9d7db0e681a326aab387cea6eb72c705cf8 372132 scdaemon_2.4.7-21+deb13u1_i386.deb
 640649f4476cf83e7416991603e0973aab64d8bd2647f7458f3dea46cf059120 176156 tpm2daemon-dbgsym_2.4.7-21+deb13u1_i386.deb
 0e6cfdb6e869dbe8bcf14a9695e9ef242d6f40888b9e318b15b1d77f0ba41115 75076 tpm2daemon_2.4.7-21+deb13u1_i386.deb
Files:
 7572e195b2bcb125da4c8397dc5b9ac4 932400 debug optional dirmngr-dbgsym_2.4.7-21+deb13u1_i386.deb
 90cf7ee20ec9e57b1d33003e7b27477f 410820 utils optional dirmngr_2.4.7-21+deb13u1_i386.deb
 cc665ab1a8074fa910a0dbee731f5f99 689304 debug optional gnupg-utils-dbgsym_2.4.7-21+deb13u1_i386.deb
 a21198f71e33ed399fbfaa4f35a45bad 208260 utils optional gnupg-utils_2.4.7-21+deb13u1_i386.deb
 7134bf3b37be5c81cd4e47ca83dc0c31 19449 utils optional gnupg2_2.4.7-21+deb13u1_i386-buildd.buildinfo
 e768b67fbeda4e379f8880f688527128 857040 debug optional gpg-agent-dbgsym_2.4.7-21+deb13u1_i386.deb
 5048d6128612995118df16a4d841777f 290328 utils optional gpg-agent_2.4.7-21+deb13u1_i386.deb
 0396c3d5d960846ec57884116e983edd 1559688 debug optional gpg-dbgsym_2.4.7-21+deb13u1_i386.deb
 e349dd6df0a02486d10104ff7bd8ec85 263112 debug optional gpg-wks-client-dbgsym_2.4.7-21+deb13u1_i386.deb
 4aeb41d627c29bf351d90cdc099ba735 117540 utils optional gpg-wks-client_2.4.7-21+deb13u1_i386.deb
 246d3ee133ffb3ae64541802933a1171 232016 debug optional gpg-wks-server-dbgsym_2.4.7-21+deb13u1_i386.deb
 1ab04b5d58780a97304bd66f88aa55cc 103884 utils optional gpg-wks-server_2.4.7-21+deb13u1_i386.deb
 3ccc7c1dd56883b1bd3cf2c91116eeb1 682752 utils optional gpg_2.4.7-21+deb13u1_i386.deb
 4fbf45c7f43dbc3e9ddd89baaaa860ba 306208 debug optional gpgconf-dbgsym_2.4.7-21+deb13u1_i386.deb
 dfb763fb354f09159a549aec1f848259 135680 utils optional gpgconf_2.4.7-21+deb13u1_i386.deb
 b386a14b627ca9c52c8da0bc93d8adbc 645852 debug optional gpgsm-dbgsym_2.4.7-21+deb13u1_i386.deb
 016ddaea4f28bb5655699ca3c3d9eb1f 297252 utils optional gpgsm_2.4.7-21+deb13u1_i386.deb
 238e2a524486147dc49bbe0a12d6c606 611728 debug optional gpgv-dbgsym_2.4.7-21+deb13u1_i386.deb
 22af4cfe2ac6074ddd31dd9281cf2d8a 669732 debug optional gpgv-static-dbgsym_2.4.7-21+deb13u1_i386.deb
 989d5e23d49544969db7cc73593ba38b 1207240 utils optional gpgv-static_2.4.7-21+deb13u1_i386.deb
 d0ab6b0f3c56bd2335e21c457a9c92e1 242896 debian-installer optional gpgv-udeb_2.4.7-21+deb13u1_i386.udeb
 b1df03d64a01d0e055cc261e18b06ba0 262036 utils important gpgv_2.4.7-21+deb13u1_i386.deb
 c03a3e345ccf52c6094056c446dca7c6 969268 debug optional scdaemon-dbgsym_2.4.7-21+deb13u1_i386.deb
 fbf32e99ec71e0651d8d8b328c772ccb 372132 utils optional scdaemon_2.4.7-21+deb13u1_i386.deb
 eccd01a9a7772d9d72b766e1a3359383 176156 debug optional tpm2daemon-dbgsym_2.4.7-21+deb13u1_i386.deb
 a9292bb94e0c9878fd171da26e77e014 75076 utils optional tpm2daemon_2.4.7-21+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=Dslf
-----END PGP SIGNATURE-----