Format: 1.8 Date: Thu, 10 Jan 2019 08:01:09 -0500 Source: gnupg2 Binary: gpgconf gnupg-agent gpg-agent gpg-wks-server gpg-wks-client scdaemon gpgsm gpg gnupg gnupg2 gpgv gpgv2 dirmngr gpgv-udeb gpgv-static gpgv-win32 gnupg-l10n gnupg-utils Architecture: amd64 all amd64_translations Version: 2.2.8-3ubuntu1.1 Distribution: cosmic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dirmngr - GNU privacy guard - network certificate management service gnupg - GNU privacy guard - a free PGP replacement gnupg-agent - GNU privacy guard - cryptographic agent (dummy transitional packa gnupg-l10n - GNU privacy guard - localization files gnupg-utils - GNU privacy guard - utility programs gnupg2 - GNU privacy guard - a free PGP replacement (dummy transitional pa gpg - GNU Privacy Guard -- minimalist public key operations gpg-agent - GNU privacy guard - cryptographic agent gpg-wks-client - GNU privacy guard - Web Key Service client gpg-wks-server - GNU privacy guard - Web Key Service server gpgconf - GNU privacy guard - core configuration utilities gpgsm - GNU privacy guard - S/MIME version gpgv - GNU privacy guard - signature verification tool gpgv-static - minimal signature verification tool (static build) gpgv-udeb - minimal signature verification tool (udeb) gpgv-win32 - GNU privacy guard - signature verification tool (win32 build) gpgv2 - GNU privacy guard - signature verification tool (dummy transition scdaemon - GNU privacy guard - smart card support Changes: gnupg2 (2.2.8-3ubuntu1.1) cosmic-security; urgency=medium . * SECURITY UPDATE: CSRF in dirmngr - debian/patches/CVE-2018-1000858.patch: don't follow a redirect in dirmngr/Makefile.am, dirmngr/http.c, dirmngr/http.h, dirmngr/ks-engine-hkp.c, dirmngr/ks-engine-http.c, dirmngr/t-http-basic.c, dirmngr/t-http.c. - CVE-2018-1000858 Checksums-Sha1: 9e8adc3b0857d53cf31d39a42d9198ba9e8b3bf2 1108572 dirmngr-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 857cbe71af63819ee055755dd22f54045a1df572 320908 dirmngr_2.2.8-3ubuntu1.1_amd64.deb 215a9052425a34da850fb74a634553b42d738298 4816 gnupg-agent_2.2.8-3ubuntu1.1_all.deb 754628135be6b2c009b7c9520a73a469709b0348 49152 gnupg-l10n_2.2.8-3ubuntu1.1_all.deb ba2685406f933ea75867294629e2c1db2cabd260 567120 gnupg-utils-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb de9ae0cf454b241fa0cd32f8a909ad1280ed469e 127112 gnupg-utils_2.2.8-3ubuntu1.1_amd64.deb f1fbd953be4987336c6c10e7b277824297777736 4588 gnupg2_2.2.8-3ubuntu1.1_all.deb 2dd0c8ddffeb4c5a8351a52b61a1b8609084b7f2 20481 gnupg2_2.2.8-3ubuntu1.1_amd64.buildinfo 63e3855e250029ac4c8c074882c7fb9e5673d61b 3581079 gnupg2_2.2.8-3ubuntu1.1_amd64_translations.tar.gz 764896ff29b14ad872b42071befcbbbb65b324b8 250832 gnupg_2.2.8-3ubuntu1.1_all.deb f3983d6a201727a7a9720e036862500a2162c26b 1156740 gpg-agent-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 4fa1af4ac8ad1f30da7bcd2a5a6307f69f879cb8 228792 gpg-agent_2.2.8-3ubuntu1.1_amd64.deb 712b0065edbb65207346cdc82bfb136cd30d034b 1561120 gpg-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 739fa746bea2224f8e18b2180d61e2e76bb9dbf1 321476 gpg-wks-client-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb ed5f6ef4251556eea64b66407248cd841d97775a 92956 gpg-wks-client_2.2.8-3ubuntu1.1_amd64.deb 74bd6a294035cc338cffb1cace4c30231415e60b 305620 gpg-wks-server-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 83b784416224208ebaf1fb446eda3a487ec55bbe 88488 gpg-wks-server_2.2.8-3ubuntu1.1_amd64.deb 895f2a4b4ca93f6a102ea750eea8287d2aa18839 471284 gpg_2.2.8-3ubuntu1.1_amd64.deb 7c09f0409e7f58ed9a4ed22657fa185ab36f1692 417548 gpgconf-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb fe90960599c118eaf0262d5288905fbe14e8fd01 123076 gpgconf_2.2.8-3ubuntu1.1_amd64.deb 782b7a66c9df21731d75a2626019f9ac60a31bfc 713056 gpgsm-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 55ad89053461515a60b1ff705bc43b3c63043b97 215176 gpgsm_2.2.8-3ubuntu1.1_amd64.deb 74ee6295458949171e28d53cda22dd1399c6cf5c 717208 gpgv-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 656aa6efd551427e2b209e6e1062b79c26953bba 755664 gpgv-static-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb afaf83f9d2feb72bd648f63f4eb0fdd7181c62dd 930332 gpgv-static_2.2.8-3ubuntu1.1_amd64.deb e40abb6116c39ea8d560762a561057429ced78d4 188820 gpgv-udeb_2.2.8-3ubuntu1.1_amd64.udeb 0b4f74a0a8ce5ce235601bec9ba843c6a91d4769 475304 gpgv-win32_2.2.8-3ubuntu1.1_all.deb 48c358c8b2d3a08a0674746c4bab1605274e1b06 4508 gpgv2_2.2.8-3ubuntu1.1_all.deb e1b13f9dbb476038abc8391377a0e099f18c6470 197132 gpgv_2.2.8-3ubuntu1.1_amd64.deb ee43356225c9f1b0785a7054b0ba3315d0c4ae79 572324 scdaemon-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb cd5084914a8093b2f8a888003e89b42f60ae872d 187216 scdaemon_2.2.8-3ubuntu1.1_amd64.deb Checksums-Sha256: a51f4311fbc9b152033e29d0f23ee80e078da471b8506d89cec6a39e06129c9c 1108572 dirmngr-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 273a1c97765e2c899e5316cb79eb8249621c72e07a5c706f13856b95939babb8 320908 dirmngr_2.2.8-3ubuntu1.1_amd64.deb 1971df2e3ff886461e5ca2916d776290791c59d578b529f8e70e9b5713a9b07f 4816 gnupg-agent_2.2.8-3ubuntu1.1_all.deb 9054bbe6c846102034c5d981ba9bde90ea9f090aa5d6a1f569f19ba8c0f9bb75 49152 gnupg-l10n_2.2.8-3ubuntu1.1_all.deb 072ea9957dbc71e240cf70cf6913e71f37f7e4d982807b052b187dad7dee3d1d 567120 gnupg-utils-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb dedaea3f1db0f7f640863683ba81884da3e4c0f26a9e92f8d4882712044dde31 127112 gnupg-utils_2.2.8-3ubuntu1.1_amd64.deb b67c5af96a87c0f4fea89d1de21a78a1091ab0fb5c56b5ce8e230951c8222da1 4588 gnupg2_2.2.8-3ubuntu1.1_all.deb 46cf8d4d3434f9de2955e568e66b834d51871c8a835aea649c0e3e8bfa5d477f 20481 gnupg2_2.2.8-3ubuntu1.1_amd64.buildinfo 5a985fcbd628a0b43c634cbd19c8c75f32d41555f1c2a2dca85c5a50bbefd8d1 3581079 gnupg2_2.2.8-3ubuntu1.1_amd64_translations.tar.gz a7dc92a6e43ac5996af3409b62a2873d45ae78a14df313a47af35507c1796ea6 250832 gnupg_2.2.8-3ubuntu1.1_all.deb cb1bfceb3c24bf924f4825f8fdfd1c6fdfdc3e6fee651905a2f6d4fd8cf99fc8 1156740 gpg-agent-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 9b22b05dfde1797b23da15566cd634da7bd9e3a6d65ff73897e380dd1bb86eac 228792 gpg-agent_2.2.8-3ubuntu1.1_amd64.deb c2c9bbfe235a8abba00ae8e6c95981205c2e88794d2d78203e8489fca2262598 1561120 gpg-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 1dcfc660a2f58280a304ea387f01bf9b69d110682673f90d0fa1a036422215a7 321476 gpg-wks-client-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 0b8566cc1e229ad01deebeb071024b583578146d1be8aa484fc57aae61459a1e 92956 gpg-wks-client_2.2.8-3ubuntu1.1_amd64.deb 7a5278a277379b6b1377850c8949e5205d1a505562250f6ba3e4e46ff1f41c62 305620 gpg-wks-server-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 0e9569e134b2dc98eadd3bf54f288043bbc5c21b65f82b49b94da0cebcd5f01f 88488 gpg-wks-server_2.2.8-3ubuntu1.1_amd64.deb 32e956193235046164075114aad65cf585eacabaa570be422ace909598ad9ff7 471284 gpg_2.2.8-3ubuntu1.1_amd64.deb 724c1e23770b78a4ec9671b215743536e9e19fad9b3c07d101f2bf5088ade5c1 417548 gpgconf-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb a7eab9d9a5588cbacc14b475ce47e63c226d41d7530f0ca3f938e2e2d2eaef96 123076 gpgconf_2.2.8-3ubuntu1.1_amd64.deb 5b5f3dca6154fa787dd5f2aaa8c858577bf7c106e136de43e3311f76d7615c83 713056 gpgsm-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb a438996dfc891e27364ce6ff30a050f86a5e4162094c872e98f0cc5185f3c3cf 215176 gpgsm_2.2.8-3ubuntu1.1_amd64.deb e06efdfc498fe249d037421210adad4067bb3bf3cf36b0b34b5bf0b65912cbbe 717208 gpgv-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 8ce5a676278e831afc7d07764429a5f0d0cc4952a808fd9714247fb271f9ff68 755664 gpgv-static-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb d95dc91ed5b0ba8ce941c116129235e9c47fe4efc6e04827e4317b8af88b920a 930332 gpgv-static_2.2.8-3ubuntu1.1_amd64.deb 4574ea6a2b3b084166deebf7f8483b026c8fe49b5593b13e89b4e41872cee80a 188820 gpgv-udeb_2.2.8-3ubuntu1.1_amd64.udeb defbb06c43cc910f8a1de07aa2327fa8b33a7f508c7c1948bc0e8018099bcde3 475304 gpgv-win32_2.2.8-3ubuntu1.1_all.deb a3c020d29dd82d61353a834206ff51f296ec048b005dcdc6da7b8833a27522c6 4508 gpgv2_2.2.8-3ubuntu1.1_all.deb 5aa532977798535c439049f39f63792ad30cbc511dce902e785b118ddb49d250 197132 gpgv_2.2.8-3ubuntu1.1_amd64.deb 729a3e04e0817e2b9a4ec2fe4204fe42b9a1493c446b20fbef27eb3f15647456 572324 scdaemon-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb a0edcc167c84225eb16e8c30233b0d205211fd0d47db5c69fa11ba0930d96585 187216 scdaemon_2.2.8-3ubuntu1.1_amd64.deb Files: dd29f53a605ccfc7a69c8dd7b07018ae 1108572 debug optional dirmngr-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb effaffb98fe6c965aaf80ab111e73325 320908 utils optional dirmngr_2.2.8-3ubuntu1.1_amd64.deb e915aa73ee0a75257325afb65941bfee 4816 oldlibs optional gnupg-agent_2.2.8-3ubuntu1.1_all.deb 1558d85b78a040959108fb67156946d8 49152 localization optional gnupg-l10n_2.2.8-3ubuntu1.1_all.deb 3675b81950faf0d5978c6ba28d9f6b3b 567120 debug optional gnupg-utils-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb b16b4f53490e268f700d11a2f60f08e7 127112 utils optional gnupg-utils_2.2.8-3ubuntu1.1_amd64.deb 12daca47bdaa7784490f6dd5b0a07464 4588 oldlibs optional gnupg2_2.2.8-3ubuntu1.1_all.deb 5afe63493f4fbbe4406f650548298209 20481 utils optional gnupg2_2.2.8-3ubuntu1.1_amd64.buildinfo 3fa7745c5dfe032e5dae5a358a5a6ad4 3581079 raw-translations - gnupg2_2.2.8-3ubuntu1.1_amd64_translations.tar.gz cc17f146149510de5677edfdf67f0c0d 250832 utils optional gnupg_2.2.8-3ubuntu1.1_all.deb 937a6790ab0d9c026a8fd79d39ac079a 1156740 debug optional gpg-agent-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb db6161c2acda5951fb702db2e79824d4 228792 utils optional gpg-agent_2.2.8-3ubuntu1.1_amd64.deb d1cb183e46190759e572d15cd26ee477 1561120 debug optional gpg-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 730f774989d69657e7c6cd6ad6e97d8b 321476 debug optional gpg-wks-client-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 771920ca3ac5b5d29ac9b73d1dc68d93 92956 utils optional gpg-wks-client_2.2.8-3ubuntu1.1_amd64.deb 8bb034a90335bcf1d62d3c495f3b1bc0 305620 debug optional gpg-wks-server-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 98925a56fab5343ec598b85a1627cef6 88488 utils optional gpg-wks-server_2.2.8-3ubuntu1.1_amd64.deb 5e6162638694c1e2152bb9c1707f0a16 471284 utils optional gpg_2.2.8-3ubuntu1.1_amd64.deb 14068506b151fc23f5aabe01b7662776 417548 debug optional gpgconf-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb be60ddb1243149cec16ea65e33621fae 123076 utils optional gpgconf_2.2.8-3ubuntu1.1_amd64.deb e66687b112c2e696b04d302915cb6dc7 713056 debug optional gpgsm-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 3c8703aff29214cc61a6272af3dae955 215176 utils optional gpgsm_2.2.8-3ubuntu1.1_amd64.deb fcf8d5c1a6a030411be1660d13888fd1 717208 debug optional gpgv-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 226a888a118bb9cb9c7090b6eedb07c1 755664 debug optional gpgv-static-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb c97696bbae288b56b46c2dffb4dc0cd6 930332 utils optional gpgv-static_2.2.8-3ubuntu1.1_amd64.deb 782006501dfadf85f447ab8110c57e8d 188820 debian-installer optional gpgv-udeb_2.2.8-3ubuntu1.1_amd64.udeb 82e9782edec7533af999e67e315cb967 475304 utils optional gpgv-win32_2.2.8-3ubuntu1.1_all.deb 5d2ae10fb2eedcc3451d6155c8f1e864 4508 oldlibs optional gpgv2_2.2.8-3ubuntu1.1_all.deb c83ad898457bde8a00743b6070a0ee8b 197132 utils important gpgv_2.2.8-3ubuntu1.1_amd64.deb 5d8d865ad5827f53ef1633726a09e7d9 572324 debug optional scdaemon-dbgsym_2.2.8-3ubuntu1.1_amd64.ddeb 27e28fb17f8f33e4adc56270d8d4669e 187216 utils optional scdaemon_2.2.8-3ubuntu1.1_amd64.deb Original-Maintainer: Debian GnuPG Maintainers