-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Jan 2026 06:46:01 +0100
Source: gnupg2
Binary: dirmngr dirmngr-dbgsym gnupg-utils gnupg-utils-dbgsym gpg gpg-agent gpg-agent-dbgsym gpg-dbgsym gpg-wks-client gpg-wks-client-dbgsym gpg-wks-server gpg-wks-server-dbgsym gpgconf gpgconf-dbgsym gpgsm gpgsm-dbgsym gpgv gpgv-dbgsym gpgv-static gpgv-static-dbgsym gpgv-udeb scdaemon scdaemon-dbgsym tpm2daemon tpm2daemon-dbgsym
Architecture: arm64
Version: 2.4.7-21+deb13u1
Distribution: trixie
Urgency: high
Maintainer: arm Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 dirmngr    - GNU privacy guard - network certificate management service
 gnupg-utils - GNU privacy guard - utility programs
 gpg        - GNU Privacy Guard -- minimalist public key operations
 gpg-agent  - GNU privacy guard - cryptographic agent
 gpg-wks-client - GNU privacy guard - Web Key Service client
 gpg-wks-server - GNU privacy guard - Web Key Service server
 gpgconf    - GNU privacy guard - core configuration utilities
 gpgsm      - GNU privacy guard - S/MIME version
 gpgv       - GNU privacy guard - signature verification tool
 gpgv-static - minimal signature verification tool (static build)
 gpgv-udeb  - minimal signature verification tool (udeb)
 scdaemon   - GNU privacy guard - smart card support
 tpm2daemon - GNU privacy guard - TPM2 support
Closes: 1124221
Changes:
 gnupg2 (2.4.7-21+deb13u1) trixie; urgency=high
 .
   * Avoid potential downgrade to SHA1 in 3rd party key signatures.
     https://gpg.fail/sha1 #12
     Patch from STABLE-BRANCH-2-4
   * gpg: Error out on unverified output for non-detached signatures.
     https://gpg.fail/detached #1
     Patch from STABLE-BRANCH-2-4
   * gpg: Fix possible memory corruption in the armor parser (CVE-2025-68973)
     https://gpg.fail/memcpy #5
     Patch from STABLE-BRANCH-2-4 (Closes: #1124221)
   * gpg: Do not use a default when asking for another output filename.
     https://gpg.fail/filename #2
     Unfuzzed patch from GIT master
Checksums-Sha1:
 94da2aeb14cd775897ec852a7374998806430f32 1019532 dirmngr-dbgsym_2.4.7-21+deb13u1_arm64.deb
 249bd62c5e4047ddcb8bd77a690690465e3b1ca3 358552 dirmngr_2.4.7-21+deb13u1_arm64.deb
 3c36e4700a77ab0e2e42d6ad5cb03ac3364c1b2c 754284 gnupg-utils-dbgsym_2.4.7-21+deb13u1_arm64.deb
 a11da9d0dbede5b7a76e7b188a08229dc6a0fe11 181876 gnupg-utils_2.4.7-21+deb13u1_arm64.deb
 88eb91fb36908e6dbf2cd04ba0dfb2d170235846 19607 gnupg2_2.4.7-21+deb13u1_arm64-buildd.buildinfo
 9036cb091b2175995f84faa9f5ec4aa07721b4bd 954904 gpg-agent-dbgsym_2.4.7-21+deb13u1_arm64.deb
 7bcc3d0a24f62ad2ba5daef9aba070b4150fd1e3 249664 gpg-agent_2.4.7-21+deb13u1_arm64.deb
 b715f02db9003721d3da91ed680f7915ad46a571 1739588 gpg-dbgsym_2.4.7-21+deb13u1_arm64.deb
 941bf1b20a37f7514bb1a0ff8eb397bee3f7b90e 289156 gpg-wks-client-dbgsym_2.4.7-21+deb13u1_arm64.deb
 3b576ba66ce1bb917d0535d096cc6501d41aceb3 101436 gpg-wks-client_2.4.7-21+deb13u1_arm64.deb
 3f4c2e13facb05ba2e53000276c0a1cfcf41a93c 255240 gpg-wks-server-dbgsym_2.4.7-21+deb13u1_arm64.deb
 527eae310c2433f352c0f45687c0b8b268362c8a 89364 gpg-wks-server_2.4.7-21+deb13u1_arm64.deb
 dfd9e2006313f0625f5ddb80ea15982f3aff84ce 578568 gpg_2.4.7-21+deb13u1_arm64.deb
 a2be8c72412e1198ad39fcaf3eccac4532ca88d1 339692 gpgconf-dbgsym_2.4.7-21+deb13u1_arm64.deb
 807c7328f8c5dda304d6fcd56f339b9b342cf388 121380 gpgconf_2.4.7-21+deb13u1_arm64.deb
 2f456368d06fa4cc1eacd1a0da8c764ac23bd333 728984 gpgsm-dbgsym_2.4.7-21+deb13u1_arm64.deb
 9be86e8d7ca7454691bf55aea6d8d0be34f67316 251464 gpgsm_2.4.7-21+deb13u1_arm64.deb
 1ca3808bd07f114194e306cf79300ce1a7d322cc 659488 gpgv-dbgsym_2.4.7-21+deb13u1_arm64.deb
 1238b7417c73b8a1d40626287db558f2e67f55d9 720608 gpgv-static-dbgsym_2.4.7-21+deb13u1_arm64.deb
 36cc0a97075dce77ab50f1740ecdc599115f98f6 1011308 gpgv-static_2.4.7-21+deb13u1_arm64.deb
 f1ac7d2acbc222b7e014806d15199ada395f21e4 200768 gpgv-udeb_2.4.7-21+deb13u1_arm64.udeb
 d5c0f0688d4bc1a2972fa3d5a9209426a0600a72 220316 gpgv_2.4.7-21+deb13u1_arm64.deb
 dc08fcc15f50ef0bd926a4e15eb25c0be368fba3 1090008 scdaemon-dbgsym_2.4.7-21+deb13u1_arm64.deb
 9fcd7cf2152acd996258a49133eb2c81b28872e1 322552 scdaemon_2.4.7-21+deb13u1_arm64.deb
 0b241f2835d31537e044536e2d109d2fe60fab1e 194504 tpm2daemon-dbgsym_2.4.7-21+deb13u1_arm64.deb
 fbcaaf7c2a083c826c6a6fb715a426d8f121a176 66232 tpm2daemon_2.4.7-21+deb13u1_arm64.deb
Checksums-Sha256:
 2ea9a0f267b1f2d17abdbe24a94b2d17edf13435fc9ccc36bbc74c9d8bf99458 1019532 dirmngr-dbgsym_2.4.7-21+deb13u1_arm64.deb
 a8b7867d01bc9447198e0adecdb94a1eb5769f5925561377d253b2c04d1115e9 358552 dirmngr_2.4.7-21+deb13u1_arm64.deb
 f7ed9b46f50b22811893777097de04ba7aa0ae8edfd281993989dd6f56150520 754284 gnupg-utils-dbgsym_2.4.7-21+deb13u1_arm64.deb
 bc1c855f7605219cd9d8710efdcae59531ef9cf85057a3734f09ffa9b51907ce 181876 gnupg-utils_2.4.7-21+deb13u1_arm64.deb
 c2df17561f4801aa4873200b73b045965e9b6e136a2438b0c22cf2d9eb1a14aa 19607 gnupg2_2.4.7-21+deb13u1_arm64-buildd.buildinfo
 9340255d26ba9707af4cafc0ff381a805d9755a0882f62a11de5a83f7767210a 954904 gpg-agent-dbgsym_2.4.7-21+deb13u1_arm64.deb
 0709f5084682abcc102a742d115c95f14b9b10ecfb2cb892355be7b8ad05cb01 249664 gpg-agent_2.4.7-21+deb13u1_arm64.deb
 48552a394b08a3976d4d7f235f09ca0621e709f0374e37d41465015092206fa6 1739588 gpg-dbgsym_2.4.7-21+deb13u1_arm64.deb
 7c3fe2d6fc97d39d2f7c9eba73ae5657caef48a09792c55b371e7ddf1d3d7d4d 289156 gpg-wks-client-dbgsym_2.4.7-21+deb13u1_arm64.deb
 897eaf1df2505994a7685034cb3e095e7495978903be15f874d660d3af58c969 101436 gpg-wks-client_2.4.7-21+deb13u1_arm64.deb
 6bd7e32faeaf05388fbde133cf4ce158c2f9615fb753b2262582b26ca553d7a3 255240 gpg-wks-server-dbgsym_2.4.7-21+deb13u1_arm64.deb
 a71073a424a2702c34f185ce4810acf94942882233347222b837cdc8a0fb5372 89364 gpg-wks-server_2.4.7-21+deb13u1_arm64.deb
 c2a6b165a34f9af3d74b10e256fdd49834a63d9632b830c6dc66e1c694c9bd26 578568 gpg_2.4.7-21+deb13u1_arm64.deb
 cec754a4fa299c28d4563520a424eb08646439777feba7e78001c6462a10aae4 339692 gpgconf-dbgsym_2.4.7-21+deb13u1_arm64.deb
 3d224c90741bbdd91d31439848877790c6a8fa8e52a16b55b68ae31467f3dda5 121380 gpgconf_2.4.7-21+deb13u1_arm64.deb
 2c75b004d8210ad9d2894c1aa6a6523bb1f2dff3bc4d66db48f4f5f747090628 728984 gpgsm-dbgsym_2.4.7-21+deb13u1_arm64.deb
 f898d510b8bb7f6c55068a4e01e98a00651736122439558da1271140f8320109 251464 gpgsm_2.4.7-21+deb13u1_arm64.deb
 2800a6647dac1fa531f4b243ea923d67bef7dbb0a2a78564ebef99390d178356 659488 gpgv-dbgsym_2.4.7-21+deb13u1_arm64.deb
 2f39a85a10f82a7375b0ae7fd8f435de9ee953e509743ecb4b497a17d690d684 720608 gpgv-static-dbgsym_2.4.7-21+deb13u1_arm64.deb
 6f2afc7b8ca0e86ce79e8f2243ce201e6735a00b23a34491216bb66cbcca22df 1011308 gpgv-static_2.4.7-21+deb13u1_arm64.deb
 03b35a9037e316128e7126cb9ff0e9614d0482e6facd8d4402790237efea123f 200768 gpgv-udeb_2.4.7-21+deb13u1_arm64.udeb
 391e7a466a3df0c99591a1febd99ff4fa2bb8db993676b4bc909efdc20300b76 220316 gpgv_2.4.7-21+deb13u1_arm64.deb
 5161605d14bd737aae6f72dec7d8012179164da571eaa5859575eeb8083d144b 1090008 scdaemon-dbgsym_2.4.7-21+deb13u1_arm64.deb
 075ffa098e0f3d1888fe6a11836f0b1476abcfadd71c6f45c1a15bafeb37c64a 322552 scdaemon_2.4.7-21+deb13u1_arm64.deb
 704d8f3fef6fb61c2643efe2e701a8845f8d99b1987cc61be8e79529e10343eb 194504 tpm2daemon-dbgsym_2.4.7-21+deb13u1_arm64.deb
 c2352c10893bbd0249ea1a35ee53b7d576546aa0c85416bb2a14c13dd2650878 66232 tpm2daemon_2.4.7-21+deb13u1_arm64.deb
Files:
 536a61ddda26221ba692e3c7c0dac867 1019532 debug optional dirmngr-dbgsym_2.4.7-21+deb13u1_arm64.deb
 f06a0b63bb983238dc891132b8801781 358552 utils optional dirmngr_2.4.7-21+deb13u1_arm64.deb
 b991d7865fdd7600f8fb5e8b53e564bf 754284 debug optional gnupg-utils-dbgsym_2.4.7-21+deb13u1_arm64.deb
 f3b211d8c0d4a375f25bdfde427a5613 181876 utils optional gnupg-utils_2.4.7-21+deb13u1_arm64.deb
 bd510d73e4c52ba1f82a3ba57dc7da1e 19607 utils optional gnupg2_2.4.7-21+deb13u1_arm64-buildd.buildinfo
 a1775edad62a67788fb5b41993401e2e 954904 debug optional gpg-agent-dbgsym_2.4.7-21+deb13u1_arm64.deb
 5ac1e8b48403b91290749d2fafdf3dac 249664 utils optional gpg-agent_2.4.7-21+deb13u1_arm64.deb
 e554216eeb6b9077e1d6fd63568f311d 1739588 debug optional gpg-dbgsym_2.4.7-21+deb13u1_arm64.deb
 c078892d6c9f8d118998960143802998 289156 debug optional gpg-wks-client-dbgsym_2.4.7-21+deb13u1_arm64.deb
 af23cac2055fdb81761a3209065e0ceb 101436 utils optional gpg-wks-client_2.4.7-21+deb13u1_arm64.deb
 f2dda2e86a3b6bc09a6308a0f2b38ecc 255240 debug optional gpg-wks-server-dbgsym_2.4.7-21+deb13u1_arm64.deb
 2771338760756d2210a83fd51286cbdf 89364 utils optional gpg-wks-server_2.4.7-21+deb13u1_arm64.deb
 0b7d34c997a0b7cd670a07089dc5c3cc 578568 utils optional gpg_2.4.7-21+deb13u1_arm64.deb
 d30ba567df42278fbeb4aeb1dabc906c 339692 debug optional gpgconf-dbgsym_2.4.7-21+deb13u1_arm64.deb
 f9697d4f2ef371f61b0f8e9d1810d987 121380 utils optional gpgconf_2.4.7-21+deb13u1_arm64.deb
 eb276b856e8b0a028c95caea9f572054 728984 debug optional gpgsm-dbgsym_2.4.7-21+deb13u1_arm64.deb
 28c4c21c5fd1fbd8cb26ba9c3b843433 251464 utils optional gpgsm_2.4.7-21+deb13u1_arm64.deb
 d60c6bb6d8f30cff7e55020430a96e6d 659488 debug optional gpgv-dbgsym_2.4.7-21+deb13u1_arm64.deb
 ff566c9c681598df6567071c148ac497 720608 debug optional gpgv-static-dbgsym_2.4.7-21+deb13u1_arm64.deb
 6f9228155712bb5b0efd8482776afbbb 1011308 utils optional gpgv-static_2.4.7-21+deb13u1_arm64.deb
 fb55aee2406e9d268e05fe84236c64de 200768 debian-installer optional gpgv-udeb_2.4.7-21+deb13u1_arm64.udeb
 2873e5a8ec376582929838f10c373863 220316 utils important gpgv_2.4.7-21+deb13u1_arm64.deb
 81ac262ee37437ac40da42245eee8b7f 1090008 debug optional scdaemon-dbgsym_2.4.7-21+deb13u1_arm64.deb
 9bc08e771587eab7f689546f440b339a 322552 utils optional scdaemon_2.4.7-21+deb13u1_arm64.deb
 1f0e9a495ec01940edee4b7c2ed2d8bd 194504 debug optional tpm2daemon-dbgsym_2.4.7-21+deb13u1_arm64.deb
 eb301d08492b1de59b5555029bf4a0b0 66232 utils optional tpm2daemon_2.4.7-21+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=IJTr
-----END PGP SIGNATURE-----