-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Jan 2026 06:46:01 +0100
Source: gnupg2
Binary: dirmngr dirmngr-dbgsym gnupg-utils gnupg-utils-dbgsym gpg gpg-agent gpg-agent-dbgsym gpg-dbgsym gpg-wks-client gpg-wks-client-dbgsym gpg-wks-server gpg-wks-server-dbgsym gpgconf gpgconf-dbgsym gpgsm gpgsm-dbgsym gpgv gpgv-dbgsym gpgv-static gpgv-static-dbgsym gpgv-udeb scdaemon scdaemon-dbgsym tpm2daemon tpm2daemon-dbgsym
Architecture: riscv64
Version: 2.4.7-21+deb13u1
Distribution: trixie
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-04) <buildd_riscv64-rv-osuosl-04@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 dirmngr    - GNU privacy guard - network certificate management service
 gnupg-utils - GNU privacy guard - utility programs
 gpg        - GNU Privacy Guard -- minimalist public key operations
 gpg-agent  - GNU privacy guard - cryptographic agent
 gpg-wks-client - GNU privacy guard - Web Key Service client
 gpg-wks-server - GNU privacy guard - Web Key Service server
 gpgconf    - GNU privacy guard - core configuration utilities
 gpgsm      - GNU privacy guard - S/MIME version
 gpgv       - GNU privacy guard - signature verification tool
 gpgv-static - minimal signature verification tool (static build)
 gpgv-udeb  - minimal signature verification tool (udeb)
 scdaemon   - GNU privacy guard - smart card support
 tpm2daemon - GNU privacy guard - TPM2 support
Closes: 1124221
Changes:
 gnupg2 (2.4.7-21+deb13u1) trixie; urgency=high
 .
   * Avoid potential downgrade to SHA1 in 3rd party key signatures.
     https://gpg.fail/sha1 #12
     Patch from STABLE-BRANCH-2-4
   * gpg: Error out on unverified output for non-detached signatures.
     https://gpg.fail/detached #1
     Patch from STABLE-BRANCH-2-4
   * gpg: Fix possible memory corruption in the armor parser (CVE-2025-68973)
     https://gpg.fail/memcpy #5
     Patch from STABLE-BRANCH-2-4 (Closes: #1124221)
   * gpg: Do not use a default when asking for another output filename.
     https://gpg.fail/filename #2
     Unfuzzed patch from GIT master
Checksums-Sha1:
 602f15d31d39b7add86a0e8bffed7435aaadec12 975208 dirmngr-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 457eaefa62961e50206f8f18bd65761b05ac4989 385720 dirmngr_2.4.7-21+deb13u1_riscv64.deb
 c1c3162bab4027e7d4aee59be9824074206ac022 728644 gnupg-utils-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 aa8779aaeaf4b5e00f3870126b5aed10833583f9 196080 gnupg-utils_2.4.7-21+deb13u1_riscv64.deb
 502ae42e9d36866c116aef09c8120c59da065974 19725 gnupg2_2.4.7-21+deb13u1_riscv64-buildd.buildinfo
 ebaf9b903f0c3dd553945e539c2a24ebadf0248d 913588 gpg-agent-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 3eaccfa31fb41f54c9ed3e5622835f8bc82f0541 269020 gpg-agent_2.4.7-21+deb13u1_riscv64.deb
 d11738d7140559549808b80a4b82326dc2ab3b99 1698680 gpg-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 800f1e448aa17c55f99b6a6c30f95e9724c54316 280072 gpg-wks-client-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 6afab913aca4ab78928227c8edfbff7f75d69b75 110236 gpg-wks-client_2.4.7-21+deb13u1_riscv64.deb
 2a09db2abb721697e386fb7fe1e4908a14421b2f 246872 gpg-wks-server-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 b57b3ef2a79afd98f688dc06d7324c143aea956f 97888 gpg-wks-server_2.4.7-21+deb13u1_riscv64.deb
 1bac95cede3b7d93d4f9eb59ffdec348cca613b0 634040 gpg_2.4.7-21+deb13u1_riscv64.deb
 d8d3f3df06b3c967cc9e5db63c666114c123e96b 328528 gpgconf-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 5233c967530ddbbdc365612e9e34e5114befb08a 128076 gpgconf_2.4.7-21+deb13u1_riscv64.deb
 58b77a161e6b4ae10ed7bc27e3c18c187e733d5c 697544 gpgsm-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 108ad11e897605a68ae89b27cb39e6bffe1ad03b 272560 gpgsm_2.4.7-21+deb13u1_riscv64.deb
 2a4d574a310e262d4f5d9b5cb1cbde2ea0cc0752 649800 gpgv-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 8d45f1676c77bd6ae08861c62dc431593fd0f086 703860 gpgv-static-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 e2c5fd890d40ad345cd1b8da143ac448cd598e4b 1164844 gpgv-static_2.4.7-21+deb13u1_riscv64.deb
 6680ee1006e8899baa084990e9d5bbf5ac64076e 227180 gpgv-udeb_2.4.7-21+deb13u1_riscv64.udeb
 8c110431553bedc2b5cb786036c9a9eac646583a 246352 gpgv_2.4.7-21+deb13u1_riscv64.deb
 61da6711824e03f48e3d18929f560430aa5c7913 1048632 scdaemon-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 9aa6d6e720aa6226f7fd60f19259f14c481cfc14 348308 scdaemon_2.4.7-21+deb13u1_riscv64.deb
 4af597669c336bd4aff13b5c07e67520face07c0 187364 tpm2daemon-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 d9b2a6b344dc31aefca7dec5f7748b665d7390dd 69672 tpm2daemon_2.4.7-21+deb13u1_riscv64.deb
Checksums-Sha256:
 357750183cfb4e978cb51c915845d776b0055792cbf43366c7a8d26415afff95 975208 dirmngr-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 9ed542195586efa089b5a00b469a060f08a31f838af81fd53d6d6b4c486f0086 385720 dirmngr_2.4.7-21+deb13u1_riscv64.deb
 ce996674a87bba3589cc54d559fab119b19aa8cf84bf671f4c6cb3ef9af6d6d9 728644 gnupg-utils-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 c86551791fbb0fe9ea189078c5848326fe2eade54c6beca3f0f95eaa3963da84 196080 gnupg-utils_2.4.7-21+deb13u1_riscv64.deb
 64630ffc61e099397e610ba07d57eac682d722b71451953b9d1929201ec2e91e 19725 gnupg2_2.4.7-21+deb13u1_riscv64-buildd.buildinfo
 1139d3feb51011b0df8cc7fc1bd2feb8bd170772aa81ca792f697c704716c849 913588 gpg-agent-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 9f5ae0336340031c48a5f0acdd8940e7c3cf22d9219c428458edf8b6d7bb3396 269020 gpg-agent_2.4.7-21+deb13u1_riscv64.deb
 c64407d2b0a8c0174fc34eea43bea981d7f1248dec7465f3be016d4b31d898f6 1698680 gpg-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 489604cbf59a9b33b7d02ae7460f8acf3f0d793ffa5a95d14224b901e463fc4a 280072 gpg-wks-client-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 5d05c5023f1d0356a339019a9cea8f8021826b6eb8b349f5177cfe5c3623ae4f 110236 gpg-wks-client_2.4.7-21+deb13u1_riscv64.deb
 86ea1cc5f5c44019b7ba6808522bccf02270543b5668684ea2b416fff2780341 246872 gpg-wks-server-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 90c0e1e20d9b31223bdcc6af48decb32432235e31fa26612f71d88165b10e1af 97888 gpg-wks-server_2.4.7-21+deb13u1_riscv64.deb
 805c8aae81bcf693aa234b7b9ce76f9a95c7a2008eebee512d43c8b1f24dcfb7 634040 gpg_2.4.7-21+deb13u1_riscv64.deb
 bc91f79c054f18c99afd76054e9fa581cab48d3845cccccf73cb85ac95e45c78 328528 gpgconf-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 fca2a5b6ed0e0b4109c6268dc42a66ad1ff07e95f03da620e57970466f1f83a7 128076 gpgconf_2.4.7-21+deb13u1_riscv64.deb
 c67e0c0973ebdb6778d0973c651a4c74e1bd32b9e3f4375bfb21b45b7276377c 697544 gpgsm-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 405d4aa92989d1955da3b6dcc0f94cc3144784c592239e7371aef6a0fb1cc97a 272560 gpgsm_2.4.7-21+deb13u1_riscv64.deb
 7e616cc24955e0cc85ef0271e0bfbf07b4bfa4190c30c790e834cf4275ff36b5 649800 gpgv-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 ae63f6043f33942c618ab832789f397bafc977b0c97b884edac0f0519709ab7d 703860 gpgv-static-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 5afc64c9ec2e449c919ccc9aad2eee7fa254f47105527d52005886b67984d5e1 1164844 gpgv-static_2.4.7-21+deb13u1_riscv64.deb
 3e9cea091786f11e2cc7682fce5a2dfcde0420aba3c6ba8afaf40c600c46041f 227180 gpgv-udeb_2.4.7-21+deb13u1_riscv64.udeb
 c60e950948f5b8c32ebec17074b736b7b3f22e0204604c4aa3e63113902c6d37 246352 gpgv_2.4.7-21+deb13u1_riscv64.deb
 14a76195c5e1567934e2d836fc167d623aadb8c41fff5b0cdc671af3ac238e3b 1048632 scdaemon-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 e86d5eb39fb4febcf3f2a039d7489eb23695c6d30eeb26b0e3fa1faccb2cd938 348308 scdaemon_2.4.7-21+deb13u1_riscv64.deb
 3b7fca327103a721f5fab444a310123dda9ea294848f1db6cd02ed5fd3735662 187364 tpm2daemon-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 668be9e262cd0a9f771dddb8aecc8bba25f47264ebd39d82a48a1631f239761d 69672 tpm2daemon_2.4.7-21+deb13u1_riscv64.deb
Files:
 e6aa706a515396b0052947a6127fabe2 975208 debug optional dirmngr-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 0c6a2542700a6ce87091030ac33addbf 385720 utils optional dirmngr_2.4.7-21+deb13u1_riscv64.deb
 4c0f062b477027ea67037e232120aa1d 728644 debug optional gnupg-utils-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 659ee5d33ae648b191177c3c3859030c 196080 utils optional gnupg-utils_2.4.7-21+deb13u1_riscv64.deb
 e9a6a9eddb7095d888dbfd99c53b753a 19725 utils optional gnupg2_2.4.7-21+deb13u1_riscv64-buildd.buildinfo
 daca09574df2c64355d2ce2feee922dc 913588 debug optional gpg-agent-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 84888403d175b9a33d9672e9c946270e 269020 utils optional gpg-agent_2.4.7-21+deb13u1_riscv64.deb
 9063238f0779eb4620816842f4f89a7a 1698680 debug optional gpg-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 fe050f54016446f04669391d6fab19c3 280072 debug optional gpg-wks-client-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 d6c73714c126c2bf4542239c63015281 110236 utils optional gpg-wks-client_2.4.7-21+deb13u1_riscv64.deb
 0efaa1ab4903e3761b6b6f8ff4bd3721 246872 debug optional gpg-wks-server-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 3a395a0baf059e53b2a80e7835a4fe22 97888 utils optional gpg-wks-server_2.4.7-21+deb13u1_riscv64.deb
 f77f6f471809d68f0b4b405574ea0246 634040 utils optional gpg_2.4.7-21+deb13u1_riscv64.deb
 a489c4f4a3cafdd76863a59dbe964f70 328528 debug optional gpgconf-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 f328f70db479ff82fb012553fae818c8 128076 utils optional gpgconf_2.4.7-21+deb13u1_riscv64.deb
 8be7f59100a6e1891a76fdb1364218a0 697544 debug optional gpgsm-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 a80ca1782879aa25eb9a4282c5963328 272560 utils optional gpgsm_2.4.7-21+deb13u1_riscv64.deb
 096de9e7291d6f8ec539bf731466f326 649800 debug optional gpgv-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 e56643d1ffcb1de4606c0686b937f9bb 703860 debug optional gpgv-static-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 b29bf3127d014a9a31f98fd497122501 1164844 utils optional gpgv-static_2.4.7-21+deb13u1_riscv64.deb
 377febe0200671ab3fd8785cb88f3d81 227180 debian-installer optional gpgv-udeb_2.4.7-21+deb13u1_riscv64.udeb
 c42b2a88653154a4ac99ed99b8ec7286 246352 utils important gpgv_2.4.7-21+deb13u1_riscv64.deb
 dce96771cdf3f14d169a357554300bef 1048632 debug optional scdaemon-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 61263f1900711a6ae2b9aa6587fa21c0 348308 utils optional scdaemon_2.4.7-21+deb13u1_riscv64.deb
 e783b0fd22d473ef09437ae4edc59c4a 187364 debug optional tpm2daemon-dbgsym_2.4.7-21+deb13u1_riscv64.deb
 6504c6d522133a526f98d345aa4b8c83 69672 utils optional tpm2daemon_2.4.7-21+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEgLDDByWcR07HDSHyNVgvumj7+mMFAmlW/30ACgkQNVgvumj7
+mMDARAAzTuup0V2KdB5R09SMOzKWX1FSNfoa9V2FfNFuwxUETl9DOaXR2plE7yn
VjnART6sxGyRnokQxSVKsFXy+Z9jUkPulK8wVZDTK/HtUwQEXPcGFFG2jr/hrGDh
mwxyjZaRUHthKjMoN3Dq2bY2C5mm769MGWP2+Ef0T3YWxYMf+N5rgfKegFLQdvt+
d0O8j61FuRw1TOmxdYSHv6s6uhI0Io0fBto6yhwN04LRSzmHx9dI2vt40+vAmO5/
NbnVtEpW2DQ9oDshhtWs7QUVNprWUSH2r0S0Ia2wL+EjTZt2czMQh9ejY1brgjKI
JE88aEW8aCQDOfz2KS7IRPX8L0RKt+jBuR5dT40TEkm5RgLLi2s51iOpfXbxUMSH
YANtgFYmIm4fGYEsb3HPDUXSEbETE0KUMPMR2EkEb5AByCthrxcDasl1PZ2CsHtK
DnZrdI/HVsDdoRMBzkr7NJl6ptV8wWUuB3978EcGnWEdviQqh9FcoJdGyRV6UVtO
22dNM/0WymGCjZAHtF/Mg5VG/Yt67RBd7nXn/JagXIbMQKWDxT4vNr7DO4PzpUKB
oLalyylub1bnW4EUBWNzXEhP79C+OJfHBpM4y+/RdrepHng1DcBTJQ9TQzn0as55
IeGl8AOX92DWvEoVbeV4fZwTB0s1u36FVBR2cDRe+/OhtbY2XFs=
=72K3
-----END PGP SIGNATURE-----