-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Jan 2026 06:46:01 +0100
Source: gnupg2
Binary: dirmngr dirmngr-dbgsym gnupg-utils gnupg-utils-dbgsym gpg gpg-agent gpg-agent-dbgsym gpg-dbgsym gpg-wks-client gpg-wks-client-dbgsym gpg-wks-server gpg-wks-server-dbgsym gpgconf gpgconf-dbgsym gpgsm gpgsm-dbgsym gpgv gpgv-dbgsym gpgv-static gpgv-static-dbgsym gpgv-udeb scdaemon scdaemon-dbgsym tpm2daemon tpm2daemon-dbgsym
Architecture: armhf
Version: 2.4.7-21+deb13u1
Distribution: trixie
Urgency: high
Maintainer: arm Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 dirmngr    - GNU privacy guard - network certificate management service
 gnupg-utils - GNU privacy guard - utility programs
 gpg        - GNU Privacy Guard -- minimalist public key operations
 gpg-agent  - GNU privacy guard - cryptographic agent
 gpg-wks-client - GNU privacy guard - Web Key Service client
 gpg-wks-server - GNU privacy guard - Web Key Service server
 gpgconf    - GNU privacy guard - core configuration utilities
 gpgsm      - GNU privacy guard - S/MIME version
 gpgv       - GNU privacy guard - signature verification tool
 gpgv-static - minimal signature verification tool (static build)
 gpgv-udeb  - minimal signature verification tool (udeb)
 scdaemon   - GNU privacy guard - smart card support
 tpm2daemon - GNU privacy guard - TPM2 support
Closes: 1124221
Changes:
 gnupg2 (2.4.7-21+deb13u1) trixie; urgency=high
 .
   * Avoid potential downgrade to SHA1 in 3rd party key signatures.
     https://gpg.fail/sha1 #12
     Patch from STABLE-BRANCH-2-4
   * gpg: Error out on unverified output for non-detached signatures.
     https://gpg.fail/detached #1
     Patch from STABLE-BRANCH-2-4
   * gpg: Fix possible memory corruption in the armor parser (CVE-2025-68973)
     https://gpg.fail/memcpy #5
     Patch from STABLE-BRANCH-2-4 (Closes: #1124221)
   * gpg: Do not use a default when asking for another output filename.
     https://gpg.fail/filename #2
     Unfuzzed patch from GIT master
Checksums-Sha1:
 41be8cb622dcaa1b91ff3b68ae3a01ed86037021 1013368 dirmngr-dbgsym_2.4.7-21+deb13u1_armhf.deb
 a1f8267ea08668af95002ed64ed1404bef8ec42a 338120 dirmngr_2.4.7-21+deb13u1_armhf.deb
 161248a07326ccfa672dba28cb5fb0cc36bb5a4d 736348 gnupg-utils-dbgsym_2.4.7-21+deb13u1_armhf.deb
 9c29be252750b08195e6ee0444250bb812900c97 163216 gnupg-utils_2.4.7-21+deb13u1_armhf.deb
 99b3ac300b47d7192da9970685929b849f69722f 19480 gnupg2_2.4.7-21+deb13u1_armhf-buildd.buildinfo
 dc3d8454bd802314a56cfb7a37105524bb08976e 927156 gpg-agent-dbgsym_2.4.7-21+deb13u1_armhf.deb
 e48661f8b608d601625934facf72a7ef3f0c4456 228284 gpg-agent_2.4.7-21+deb13u1_armhf.deb
 13ae81c6f4731af140a33f10f695141c2d90ab4b 1707116 gpg-dbgsym_2.4.7-21+deb13u1_armhf.deb
 fa1e8bb24779ba8df3f4f86b37597714ae5a990b 289408 gpg-wks-client-dbgsym_2.4.7-21+deb13u1_armhf.deb
 b3ba12a98912969ef3cc1010efd197f913854629 93372 gpg-wks-client_2.4.7-21+deb13u1_armhf.deb
 b95dc90f55291d5399f1933312b8c8635651b31d 254692 gpg-wks-server-dbgsym_2.4.7-21+deb13u1_armhf.deb
 7b0d9c0dc66439c1bc0038addbcc704b7a3e5bf1 83048 gpg-wks-server_2.4.7-21+deb13u1_armhf.deb
 5f790114b2cf58562789af6d19f636894021c032 553060 gpg_2.4.7-21+deb13u1_armhf.deb
 6ad931d9c7ead4bd538553c318783e57c7c5b6c5 332124 gpgconf-dbgsym_2.4.7-21+deb13u1_armhf.deb
 acd10c7a8b510d6dbed270c3830e480e9970b693 112552 gpgconf_2.4.7-21+deb13u1_armhf.deb
 5809b93f6e5154b77bbf73441fa44f331f008ab1 726008 gpgsm-dbgsym_2.4.7-21+deb13u1_armhf.deb
 6bc4e4a5b7db59a0649f4e6c03262d729450ec3a 237556 gpgsm_2.4.7-21+deb13u1_armhf.deb
 f2e1def285e97a919ece84c96c306cb3e7a68a3a 660944 gpgv-dbgsym_2.4.7-21+deb13u1_armhf.deb
 59364b7a9145aad75ece8d778bc6cb6a71c44265 727200 gpgv-static-dbgsym_2.4.7-21+deb13u1_armhf.deb
 0a9c135780cb0f523710e403693b1516ae65dd6c 945848 gpgv-static_2.4.7-21+deb13u1_armhf.deb
 7726f118ea9f5dec7a181355f451071313177742 185680 gpgv-udeb_2.4.7-21+deb13u1_armhf.udeb
 ff6108914f684b9c068d304bf9d9feca76e1cab3 204456 gpgv_2.4.7-21+deb13u1_armhf.deb
 b0490a9768382002db316eeb6441b48f0901149d 1057504 scdaemon-dbgsym_2.4.7-21+deb13u1_armhf.deb
 8857c384c4e0b479e2412d9f33e0c0492df74cc4 294764 scdaemon_2.4.7-21+deb13u1_armhf.deb
 ccceec6fa0ab429814c5016dd9af010840c54d19 193464 tpm2daemon-dbgsym_2.4.7-21+deb13u1_armhf.deb
 e49206bdae421e8c4f21a3107f844e94d3daf739 60372 tpm2daemon_2.4.7-21+deb13u1_armhf.deb
Checksums-Sha256:
 ea6053eda0f6e3a038e74534906c83c9e62739551a1da5d9f4d5b17ce6f82b32 1013368 dirmngr-dbgsym_2.4.7-21+deb13u1_armhf.deb
 e9dee246e27826c8d44d343647157e69d8f63cc3dd992c9ec24c06c4e9bea27b 338120 dirmngr_2.4.7-21+deb13u1_armhf.deb
 f9e336206c194b6c36ff1c6272a59b666cf57d60238b110c5dc74d1c4dbc9761 736348 gnupg-utils-dbgsym_2.4.7-21+deb13u1_armhf.deb
 5fa2aa41312e6ce4f0814ef41af230c851250a20a05035c153887c2aa7e3a498 163216 gnupg-utils_2.4.7-21+deb13u1_armhf.deb
 a802180b57646c4170d4bb871333200931d6b0c27de047e0d84f3310eec629fc 19480 gnupg2_2.4.7-21+deb13u1_armhf-buildd.buildinfo
 ceb765003ae69dac3f84e1d80101dbd79327713085ce31c3b36e182d3cac3e45 927156 gpg-agent-dbgsym_2.4.7-21+deb13u1_armhf.deb
 cde37bdfb92204a971ffbab5879c266f5b26da99106b65fdc98773d21e14d2cf 228284 gpg-agent_2.4.7-21+deb13u1_armhf.deb
 f909cb26ccade24df1cfc691318166d29ec688576a20f11ad820a858aab63047 1707116 gpg-dbgsym_2.4.7-21+deb13u1_armhf.deb
 608d68fb5fcbc741813aa918df4a5e4bcfff34c3688d6e114fa1aec427e1aa32 289408 gpg-wks-client-dbgsym_2.4.7-21+deb13u1_armhf.deb
 4f653047a3ae286da1196fe544f1e7217d3fd4769f7d84d26049246a7dd00c98 93372 gpg-wks-client_2.4.7-21+deb13u1_armhf.deb
 74d60d8091ed8c9d979add164ed989b9d1acb67d197a8072069653e898465465 254692 gpg-wks-server-dbgsym_2.4.7-21+deb13u1_armhf.deb
 3d22dcfd8e16574996e165bb05a5ad71f0d0656c5f99e1c6337b91bb80fc822e 83048 gpg-wks-server_2.4.7-21+deb13u1_armhf.deb
 748fae73c46e73d56bcb934c21a845fe0d6aacc29b92f33907e8007ae77d4685 553060 gpg_2.4.7-21+deb13u1_armhf.deb
 36d773ce988d38832c5bbeea82bf914601e989679ea21fb82c1ec23ddb598f1a 332124 gpgconf-dbgsym_2.4.7-21+deb13u1_armhf.deb
 ed1bb3c9df234ace46721f532f89b4eafa114b050a0530918673e5c1587f31fd 112552 gpgconf_2.4.7-21+deb13u1_armhf.deb
 2478bee9e3fd2f209745187388a4a749b84de700d5d29a0c17322864a2acb41d 726008 gpgsm-dbgsym_2.4.7-21+deb13u1_armhf.deb
 bea9a6fc81cf05eb502894cd3db53dde87ea6b73e0fb8d3df2da260ddd6c28c8 237556 gpgsm_2.4.7-21+deb13u1_armhf.deb
 8e4b3016ef37224e5b6225e6551279d0ab8f43b019c2c6ce3597c418e00e5314 660944 gpgv-dbgsym_2.4.7-21+deb13u1_armhf.deb
 2609cbd8b94e17318fcd9f50c57ae55b5ce1a98d7e7f972746eba8612677bab6 727200 gpgv-static-dbgsym_2.4.7-21+deb13u1_armhf.deb
 23b7d3f3c277abd6780ba4f0fa7ec60dc43d78391cfaefa5d3b2fd61c76e9ef9 945848 gpgv-static_2.4.7-21+deb13u1_armhf.deb
 6115196293f627e81ca3641e52aa8a2aa70165605338a7c0504ffb0d0955dee1 185680 gpgv-udeb_2.4.7-21+deb13u1_armhf.udeb
 8fb441f0bb895cd3720f3b6813c654bc3deb5c913f9ec8ba8ebcf6106557ff52 204456 gpgv_2.4.7-21+deb13u1_armhf.deb
 7894e754e54e5cfc3932127c9ccadd36915f6e23d2aad593ad4f15a34a4dedb7 1057504 scdaemon-dbgsym_2.4.7-21+deb13u1_armhf.deb
 55593f66071a961051e6e39fc590020ca6688af9b555ce4de3f2b37899f40462 294764 scdaemon_2.4.7-21+deb13u1_armhf.deb
 eeec4a219b479c46acc70a9bec799f47cf21f58898759c8a7cb658fbc7b2bc92 193464 tpm2daemon-dbgsym_2.4.7-21+deb13u1_armhf.deb
 728f248e41d742c4fc722b567f42506d65e0e9df4402e1abe6eef9807f3d7237 60372 tpm2daemon_2.4.7-21+deb13u1_armhf.deb
Files:
 2a05bdca808df5b73f04c064dc95a6e0 1013368 debug optional dirmngr-dbgsym_2.4.7-21+deb13u1_armhf.deb
 c0f0b02a11c73a8b4a7ac9adf0a4fe3b 338120 utils optional dirmngr_2.4.7-21+deb13u1_armhf.deb
 87b90aa896341ea14724e61d2c25ed91 736348 debug optional gnupg-utils-dbgsym_2.4.7-21+deb13u1_armhf.deb
 12d9f77070f9dbd9c4a9b5134bfe33ec 163216 utils optional gnupg-utils_2.4.7-21+deb13u1_armhf.deb
 90a9bdb6760586a959f914959884d501 19480 utils optional gnupg2_2.4.7-21+deb13u1_armhf-buildd.buildinfo
 9b7a2c5fe62d4bf857ea38472be3208c 927156 debug optional gpg-agent-dbgsym_2.4.7-21+deb13u1_armhf.deb
 a8ed6ec4e46af5d49cf6a128a6a60c68 228284 utils optional gpg-agent_2.4.7-21+deb13u1_armhf.deb
 04ff5becb71e8d9d2eb3a86dbd44fddc 1707116 debug optional gpg-dbgsym_2.4.7-21+deb13u1_armhf.deb
 e8e4c2853647178fc6ced4f717b4641c 289408 debug optional gpg-wks-client-dbgsym_2.4.7-21+deb13u1_armhf.deb
 cbba0bb6aef0990ebad858d879a32aff 93372 utils optional gpg-wks-client_2.4.7-21+deb13u1_armhf.deb
 4392563cda67805b36c2a1aa5a7a5844 254692 debug optional gpg-wks-server-dbgsym_2.4.7-21+deb13u1_armhf.deb
 dfe29671d485fc1492aca511900f1579 83048 utils optional gpg-wks-server_2.4.7-21+deb13u1_armhf.deb
 55efe6f8a66d9fc61f6e841811a8f8a7 553060 utils optional gpg_2.4.7-21+deb13u1_armhf.deb
 57ce11aced072b7faec81e13cae67c0d 332124 debug optional gpgconf-dbgsym_2.4.7-21+deb13u1_armhf.deb
 7cf6df1743c90783c60f9dbb5bdd386d 112552 utils optional gpgconf_2.4.7-21+deb13u1_armhf.deb
 1eb2961798b7fb3452afa233d87d8467 726008 debug optional gpgsm-dbgsym_2.4.7-21+deb13u1_armhf.deb
 1c878e118ab429b017435f7fa07b631d 237556 utils optional gpgsm_2.4.7-21+deb13u1_armhf.deb
 354c28bc283621329e09c0ed77a398ef 660944 debug optional gpgv-dbgsym_2.4.7-21+deb13u1_armhf.deb
 eab89be799815e50710690ae20b86565 727200 debug optional gpgv-static-dbgsym_2.4.7-21+deb13u1_armhf.deb
 e5c8687c5222c377c0ad650799ed6ce7 945848 utils optional gpgv-static_2.4.7-21+deb13u1_armhf.deb
 71cf9418f0caa42cfcc8d4f8148f4a09 185680 debian-installer optional gpgv-udeb_2.4.7-21+deb13u1_armhf.udeb
 2cab37068477bda860107db2c3137fbc 204456 utils important gpgv_2.4.7-21+deb13u1_armhf.deb
 af58b7af35fcbc4c4376e5b7ba78997a 1057504 debug optional scdaemon-dbgsym_2.4.7-21+deb13u1_armhf.deb
 6bb54c35e428abb0d15b69009ce864ff 294764 utils optional scdaemon_2.4.7-21+deb13u1_armhf.deb
 61f4b312e6d3ebc747553332408d043b 193464 debug optional tpm2daemon-dbgsym_2.4.7-21+deb13u1_armhf.deb
 07345aa23328388ccb35502db74a8dd8 60372 utils optional tpm2daemon_2.4.7-21+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=8u/r
-----END PGP SIGNATURE-----