Bug#989422: buster-pu: package libgcrypt20/1.8.4-5+deb10u1

2021-06-12 Thread Andreas Metzler
On 2021-06-12 "Adam D. Barratt" wrote: [...] > As we're getting close to the window for 10.10 closing, please feel > free to upload the package and we'll handle the d-i coordination from > there. Thanks for the heads-up. Done. cu Andreas -- `What a good friend you are to him, Dr. Maturin. His o

Bug#989422: buster-pu: package libgcrypt20/1.8.4-5+deb10u1

2021-06-12 Thread Adam D. Barratt
On Fri, 2021-06-11 at 11:06 +0100, Adam D. Barratt wrote: > Control: tags -1 + confirmed d-i > > On Thu, 2021-06-03 at 13:31 +0200, Andreas Metzler wrote: > > I would like to fix the non-DSA CVE-2021-33560 for buster by > > cherrypicking the respective commit from 1.8.8. This is about weak > > ElG

Bug#989422: buster-pu: package libgcrypt20/1.8.4-5+deb10u1

2021-06-11 Thread Adam D. Barratt
Control: tags -1 + confirmed d-i On Thu, 2021-06-03 at 13:31 +0200, Andreas Metzler wrote: > I would like to fix the non-DSA CVE-2021-33560 for buster by > cherrypicking the respective commit from 1.8.8. This is about weak > ElGamal encyption when a key not generated by libgcrypt/gnupg is > used.