-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 01 Jan 2026 15:54:00 +0100 Source: gnupg2 Binary: dirmngr dirmngr-dbgsym gnupg-utils gnupg-utils-dbgsym gpg gpg-agent gpg-agent-dbgsym gpg-dbgsym gpg-wks-client gpg-wks-client-dbgsym gpg-wks-server gpg-wks-server-dbgsym gpgconf gpgconf-dbgsym gpgsm gpgsm-dbgsym gpgv gpgv-dbgsym gpgv-static gpgv-static-dbgsym gpgv-udeb scdaemon scdaemon-dbgsym Architecture: mips64el Version: 2.2.40-1.1+deb12u2 Distribution: bookworm Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Daniel Kahn Gillmor Description: dirmngr - GNU privacy guard - network certificate management service gnupg-utils - GNU privacy guard - utility programs gpg - GNU Privacy Guard -- minimalist public key operations gpg-agent - GNU privacy guard - cryptographic agent gpg-wks-client - GNU privacy guard - Web Key Service client gpg-wks-server - GNU privacy guard - Web Key Service server gpgconf - GNU privacy guard - core configuration utilities gpgsm - GNU privacy guard - S/MIME version gpgv - GNU privacy guard - signature verification tool gpgv-static - minimal signature verification tool (static build) gpgv-udeb - minimal signature verification tool (udeb) scdaemon - GNU privacy guard - smart card support Closes: 1124221 Changes: gnupg2 (2.2.40-1.1+deb12u2) bookworm; urgency=high . * Address four issues from https://gpg.fail, including: + Fix CVE-2025-68973 (Closes: #1124221) + Avoid potential downgrade to SHA1 in 3rd party key signatures. + Error out on unverified output for non-detached signatures. + Do not use a default when asking for another output filename. * d/control: Point Vcs-Git to the correct branch Checksums-Sha1: 5cb67768aa5691c0c73d4b40b87830dba1f51a80 1020144 dirmngr-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 482f46ac6506d7c9485312255a0989d756028d12 773740 dirmngr_2.2.40-1.1+deb12u2_mips64el.deb eea83c315403ca87c5e7a82f1785aed516ff8f98 1689600 gnupg-utils-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 67648e9d356eb7a034775dd38f1d3270bd5078d8 887464 gnupg-utils_2.2.40-1.1+deb12u2_mips64el.deb 052c8ecce33e304a792cf0dc1cc92129968647d5 16977 gnupg2_2.2.40-1.1+deb12u2_mips64el-buildd.buildinfo 93c21f199955175b706a10e56a169b682beef3d6 1004120 gpg-agent-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 7004e80fc60d219d5ab3ef186f4cf34bd2091aae 677352 gpg-agent_2.2.40-1.1+deb12u2_mips64el.deb 785721a64af1013cfe52d27d7c0466b11e137843 1330348 gpg-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 5af088d38ab803601b29cf33bfbe9f60caa0fc62 320468 gpg-wks-client-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb c4fe0fb7026d400510d084f46d1b843c1a66e06e 535768 gpg-wks-client_2.2.40-1.1+deb12u2_mips64el.deb 0f92e9353dc2e5c5ba75eff361123730607fcf8c 294124 gpg-wks-server-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb c55fb7dd6f1ef99d9b6df500b2cfc85774fa1f47 526884 gpg-wks-server_2.2.40-1.1+deb12u2_mips64el.deb 4ed4587c50ba8cd34b1d029aa3264c4fe8b9bb80 904728 gpg_2.2.40-1.1+deb12u2_mips64el.deb 88caf96d7f2b411e472282cdc0ce453a19626fc4 401788 gpgconf-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 5014da520907404129b2f862c9d9c8a5fe6ca4d8 559260 gpgconf_2.2.40-1.1+deb12u2_mips64el.deb cd579c70edf909fea1413f6a7db4ebc995a4bacf 671416 gpgsm-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 5700eb87d700f0467da9d5337f726a7a23d7670d 652280 gpgsm_2.2.40-1.1+deb12u2_mips64el.deb fb5b3d927cd326b1b72e1813f89206e40617f4c5 636312 gpgv-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 4c45c47ff2376f7996a9d2c915adbaca5f7f69ca 690208 gpgv-static-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb d460baa108586909a56c3aa12b491d51b81be80a 1360308 gpgv-static_2.2.40-1.1+deb12u2_mips64el.deb c5d6035717345a70a34abaf3d60a129e47383ebc 188468 gpgv-udeb_2.2.40-1.1+deb12u2_mips64el.udeb 3bf00a0e33386e0ceed18f2ccc7f7d2c48e886f0 636900 gpgv_2.2.40-1.1+deb12u2_mips64el.deb 12722055f65e7d5b1ded10f2f9b6aeca19a6500e 595520 scdaemon-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 446b9b8a169c8095a793f2239e533e658d2ef285 630732 scdaemon_2.2.40-1.1+deb12u2_mips64el.deb Checksums-Sha256: 197b01ae58b28656388e35f192cceb172f4c2bf5ac014a23c525ece386ca660f 1020144 dirmngr-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 1b7c6c1fa58360f4c002d56659cef585bec5faf8c7e95fa13bb3bc868ec769c8 773740 dirmngr_2.2.40-1.1+deb12u2_mips64el.deb bd7e8e8eb94c186cad0999560f4c016bb5833c9f38a526e22578ca56bf11c0e6 1689600 gnupg-utils-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 7a1c8dbc35a8e6640cdcddc5a9f2943656db1394711b89cb840a6098127c9a68 887464 gnupg-utils_2.2.40-1.1+deb12u2_mips64el.deb 5803ea2f113e4790e861e1ba4b7cd9f5c52c1e4314a03fd9d53e32299440baf4 16977 gnupg2_2.2.40-1.1+deb12u2_mips64el-buildd.buildinfo 12a596b21813b7d9b05abf447ef1767cab2b126eceb25afe28ce78953baa99dc 1004120 gpg-agent-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb ba1dab69b5cc79305e0cf113c8aea8bfe1c5eba4791cb402524a6a209dbe56f0 677352 gpg-agent_2.2.40-1.1+deb12u2_mips64el.deb aad8904eacade74259621f703aecc004725941cfc48b7c3978b5acae8587a4be 1330348 gpg-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb ab4bdf689fe6d97e56d1bdac442a7297b525b217f31e41cde2ba13e1fbfcae4b 320468 gpg-wks-client-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb f3fbbae40dce12ff08d79876223ce34a0c7082af2a73f9bd4672da57f586205b 535768 gpg-wks-client_2.2.40-1.1+deb12u2_mips64el.deb b915ce5b45ff1dfbd1f31b5ccbe5e70e9e34f395332e793e903c987617f83300 294124 gpg-wks-server-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb b2ddf9dbd5b0064f1a4b885fc2f3d2733a2a16931ac2ee7aadf497e3476243dd 526884 gpg-wks-server_2.2.40-1.1+deb12u2_mips64el.deb 5997a25cb2eb852b8590b7f6f42eae9b1b0873014539b0829d3b1fb72ccedec7 904728 gpg_2.2.40-1.1+deb12u2_mips64el.deb 7aa7dc6c89cc67ce7dd59a103017f72c2a2300d3847fb64450ead3c215a9effe 401788 gpgconf-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 243a8775666f2ef9fcbe0df5549e5feac6853ee581bef91f14eb2b0fd856fc2f 559260 gpgconf_2.2.40-1.1+deb12u2_mips64el.deb dab25eaa7f359b3c23f4edca31e74c643eb2810ab359493afd10b511a9e7b14b 671416 gpgsm-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 57e37984df7cd4fa675784dc44e622b8e90c812fda5ea58778ef45ed8c02db10 652280 gpgsm_2.2.40-1.1+deb12u2_mips64el.deb 74e8398cd6bcd12c63681661e8d97dd5fb6f8a3778f0d3118453493bd21a5b62 636312 gpgv-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 3a6a893f737c576ac22994712cefb1fb82ffb53f3d1a66734118048751d25550 690208 gpgv-static-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb e334fb046a47d67b1b2eb0e2b028d67c6fdd6be085b97f8f3afb18255c8a3016 1360308 gpgv-static_2.2.40-1.1+deb12u2_mips64el.deb af579d6c5b8ef99ec24e092baf1fb4f6f179b71eb69c78ddd2817b0d5078e1fd 188468 gpgv-udeb_2.2.40-1.1+deb12u2_mips64el.udeb 56d59830b8ca563607f2a9f9ef172f49e57cef393f1da643c3ce935e48b69f9e 636900 gpgv_2.2.40-1.1+deb12u2_mips64el.deb 3547ab121923e48d3cbe95feabe18a5ffbe91c078b7b46f3f8611a58bdb036e5 595520 scdaemon-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb a55fef541e9a7b9bea20bc827f3842e7b7decfe8f7e6d27cf13e3f308bfc55b2 630732 scdaemon_2.2.40-1.1+deb12u2_mips64el.deb Files: c976194bafd2e347bfb163b3ed086ac2 1020144 debug optional dirmngr-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 1525fc5008fed4bd883366e79d8190ac 773740 utils optional dirmngr_2.2.40-1.1+deb12u2_mips64el.deb 324efdadb38292e622efad1f90ec6bd0 1689600 debug optional gnupg-utils-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 2d23dbb54e86923f0bed0e2330bb8f53 887464 utils optional gnupg-utils_2.2.40-1.1+deb12u2_mips64el.deb 0fc2d4aa9666841e80310b1b53ad5707 16977 utils optional gnupg2_2.2.40-1.1+deb12u2_mips64el-buildd.buildinfo 213ce216546522df6da2d076eb1de11c 1004120 debug optional gpg-agent-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb cba52095f7a4fb1d40c1f0076db8aaae 677352 utils optional gpg-agent_2.2.40-1.1+deb12u2_mips64el.deb 6a944899060cabc127083119460225b8 1330348 debug optional gpg-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb f691d387ffde5abe3f03f98e37de20f1 320468 debug optional gpg-wks-client-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 0d267e0e5859988c643bc75a65d7c9b0 535768 utils optional gpg-wks-client_2.2.40-1.1+deb12u2_mips64el.deb 944d5e75707b767682bbff2616e70783 294124 debug optional gpg-wks-server-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 30dfccccc7943d5548dae97a178df157 526884 utils optional gpg-wks-server_2.2.40-1.1+deb12u2_mips64el.deb b1008666fed7026444e18da922195004 904728 utils optional gpg_2.2.40-1.1+deb12u2_mips64el.deb 9ed277a8ce7772e495b139ed95862725 401788 debug optional gpgconf-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb f284719c59f9c078e826e460c0d5f46f 559260 utils optional gpgconf_2.2.40-1.1+deb12u2_mips64el.deb 54eaf1aa95af1e46c9f554505760e2af 671416 debug optional gpgsm-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 6231a066cfed8b331657a6006d0f1efe 652280 utils optional gpgsm_2.2.40-1.1+deb12u2_mips64el.deb f857ebed1fec3067aac7128fe2b136a0 636312 debug optional gpgv-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 2b6844a51bc46d1a498509c6c5d1637c 690208 debug optional gpgv-static-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb 5f9333be36a5bc0954ab0a91e040341e 1360308 utils optional gpgv-static_2.2.40-1.1+deb12u2_mips64el.deb 39afae34a31e060f1a3a91490d2b1d3d 188468 debian-installer optional gpgv-udeb_2.2.40-1.1+deb12u2_mips64el.udeb e46408495cc9c27717ca42ee71a14697 636900 utils important gpgv_2.2.40-1.1+deb12u2_mips64el.deb 1b55d739e3d14a01b56d06d1829de703 595520 debug optional scdaemon-dbgsym_2.2.40-1.1+deb12u2_mips64el.deb fe372211836e04a5e37cf22abbe0b3b5 630732 utils optional scdaemon_2.2.40-1.1+deb12u2_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEesE3YcWKZXIkRPMemf85J+x5/aoFAmlYYZEACgkQmf85J+x5 /aqZJRAApYqNX4oVnyEHdeO6zixMc3qb9CN8NlrcXy26eqhCcWg91q06SnmUWhKf x+F/Qau8+xifiH7pf5nqjLivP2DqJV1JUoG5W/gRAxN1aBhRtNYKyzneGO81t/W9 eKwxxhwkxdgxwFwNGw9oMEEbKFRHm6WYJalHaHioqfA6l4pWJeYJei5X55artX3c y0YZOyzsToBnFhnzOU7MGLLry8y8EA+wReMpXNbLUHTvBDNQQYc3oX3SBTkuG16+ /fJociDI8tyC2dgKXOdolIqjiPzoCe87sbqZoeJFL725xUPyEbcV2cfkxqQ+qBJA OWFa8wC3aiODQiaKvp4LWqfP0lm2ocjZQMQRXzbXxgMNyd2Fg7UhJjd7+kYknol4 rgHqF6uGrXKxNPkpgZ+IAen0/LAB4nmOM8z9GNZuXSylc/HmFmmHyfPt/m59xKh4 E+yXrL2UfBCpWXAmNg740oDa7p6xyLKpMK+E4KnSNVxkSFrRNspEc2z2dKgHti5p P76ZAsk2TOAwTI9D2BPdU8JkulApxDDhoVm4szCzznLY0r/FBizPyhp2Pa309Vrv 3564Ol96v7Yx5r1KGVN6BpyYCtaY4AzZ00tC//E/N/F7MfezY8kfzMcJL3tKs0iX DJGuGNvgNTU4tgbyCKnJNu6eLVEy36RX51oJ762NIRfvGeGYzuk= =yq3o -----END PGP SIGNATURE-----