-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 01 Jan 2026 15:54:00 +0100 Source: gnupg2 Binary: dirmngr dirmngr-dbgsym gnupg-utils gnupg-utils-dbgsym gpg gpg-agent gpg-agent-dbgsym gpg-dbgsym gpg-wks-client gpg-wks-client-dbgsym gpg-wks-server gpg-wks-server-dbgsym gpgconf gpgconf-dbgsym gpgsm gpgsm-dbgsym gpgv gpgv-dbgsym gpgv-static gpgv-static-dbgsym gpgv-udeb scdaemon scdaemon-dbgsym Architecture: mipsel Version: 2.2.40-1.1+deb12u2 Distribution: bookworm Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Daniel Kahn Gillmor Description: dirmngr - GNU privacy guard - network certificate management service gnupg-utils - GNU privacy guard - utility programs gpg - GNU Privacy Guard -- minimalist public key operations gpg-agent - GNU privacy guard - cryptographic agent gpg-wks-client - GNU privacy guard - Web Key Service client gpg-wks-server - GNU privacy guard - Web Key Service server gpgconf - GNU privacy guard - core configuration utilities gpgsm - GNU privacy guard - S/MIME version gpgv - GNU privacy guard - signature verification tool gpgv-static - minimal signature verification tool (static build) gpgv-udeb - minimal signature verification tool (udeb) scdaemon - GNU privacy guard - smart card support Closes: 1124221 Changes: gnupg2 (2.2.40-1.1+deb12u2) bookworm; urgency=high . * Address four issues from https://gpg.fail, including: + Fix CVE-2025-68973 (Closes: #1124221) + Avoid potential downgrade to SHA1 in 3rd party key signatures. + Error out on unverified output for non-detached signatures. + Do not use a default when asking for another output filename. * d/control: Point Vcs-Git to the correct branch Checksums-Sha1: 471727be29669fd7f1cb41e72602ef6fb5408ebd 999656 dirmngr-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb cb27718369a902e4f569ab45a9b236dab50b350b 778028 dirmngr_2.2.40-1.1+deb12u2_mipsel.deb 1bfad8296efa80f9ca292a9f3215f194ade8f81c 1644320 gnupg-utils-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb da19c35e776fd57ad08a1213eb7271dc6acd8132 888188 gnupg-utils_2.2.40-1.1+deb12u2_mipsel.deb 495a768f649e1436c5a27e2fb9363f22c7fd717e 16822 gnupg2_2.2.40-1.1+deb12u2_mipsel-buildd.buildinfo 7b96dea91a0a06784fbe7e626b753a2ec59786f8 980348 gpg-agent-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 79c3ad05f1a22ebd694c8c3c0ed57da47a6b7163 677876 gpg-agent_2.2.40-1.1+deb12u2_mipsel.deb 933ee0a2fe36cca11bc93a2ed74203d6ccc600f3 1296216 gpg-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb a32be40fe86fde431791649a5dc2fda453c5e5f7 313528 gpg-wks-client-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 8473eb89dad71e37fa5a0d86f7e478433305052a 535576 gpg-wks-client_2.2.40-1.1+deb12u2_mipsel.deb 05f13246306504d7289d89d8abb34369a9b777ac 286880 gpg-wks-server-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 87785cc1bb6d3857f22a3e24f4ab7c647d53d343 526660 gpg-wks-server_2.2.40-1.1+deb12u2_mipsel.deb 6bd527b59e3ae404682ae0d902c406a3b8abff6e 907676 gpg_2.2.40-1.1+deb12u2_mipsel.deb e915b56e9bc431f8099f6a57c663eedef2b0080e 391684 gpgconf-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 55c5d768683966c0ac8b2a860020849092426e26 559064 gpgconf_2.2.40-1.1+deb12u2_mipsel.deb 5a1fd9d0e0dd76e672bc473f58efe3ca18a085fa 656136 gpgsm-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb a5b89e6b6075f7095cc0f1c691eb77882036a1e5 651888 gpgsm_2.2.40-1.1+deb12u2_mipsel.deb 02920f9fee292e094d27353c1406913127843373 622076 gpgv-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 84c6803ba6ee486fbc148e5e3ba8a1ae66744a8c 675620 gpgv-static-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 08523aefa90a08418f0184547824f877d3d1115b 1397144 gpgv-static_2.2.40-1.1+deb12u2_mipsel.deb e2267c7fc5dafbf476b23943e4e4fba60c7edf0e 187264 gpgv-udeb_2.2.40-1.1+deb12u2_mipsel.udeb 92de00b669f2a949b79c83a697d20ae0d3b3cfe1 635816 gpgv_2.2.40-1.1+deb12u2_mipsel.deb 9a495dd058c5ec223d84b8d3a0087bbca7bae1d9 587588 scdaemon-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 27dacdd1466b109888d668dd7ed293954d8839df 631104 scdaemon_2.2.40-1.1+deb12u2_mipsel.deb Checksums-Sha256: 8604f79c4fe26932fa21098d75ceb00c064e752042e71fc1af9db96577be9428 999656 dirmngr-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 964b525cc276f9d2125f7f4ed24033502057a5de8462bdb19d849f626f7d81b7 778028 dirmngr_2.2.40-1.1+deb12u2_mipsel.deb 844795880c43c3cd2d90017b559e221c151d39e7c0e013fb13d717ec48dcd55e 1644320 gnupg-utils-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 12cbd91dff7cdd1d3dca6ed3d32856c8b7fac9c24b898a7a827e82eb6f723ab3 888188 gnupg-utils_2.2.40-1.1+deb12u2_mipsel.deb d3ef8ea277a481f771ab02793a613f60af07ddda252687b182ca6f1b954e63f8 16822 gnupg2_2.2.40-1.1+deb12u2_mipsel-buildd.buildinfo fbaf2546ca43dc746a02a0a3f52f2f6ae464bc76a1a7fee6a38ecfb449603296 980348 gpg-agent-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb ef80ee2ff6d90a4c26bbea41566668a7181bf780ae01af7ee63704706f3b9f93 677876 gpg-agent_2.2.40-1.1+deb12u2_mipsel.deb 3fd9f0d5aeb092fc38c3cbfe9e429792f5a4b66c3c07e60c4b20d31229de0f99 1296216 gpg-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 707ac788a35a5a25fa001a72cd3d14d2dd418f73d4a256aa30f6cf7e4d80101e 313528 gpg-wks-client-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb dfb187f6eb88b2112228931528c2edff1eba77fe23aabf19a0785ac0242f6c72 535576 gpg-wks-client_2.2.40-1.1+deb12u2_mipsel.deb 205dd6c7e84caff33001f2f14747031fe0599e9f2464942752aa5c4b9e031376 286880 gpg-wks-server-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb de56d46080c58d228dc9368001fece2a62c1c6dec5fe298f5f3f8485e78c5685 526660 gpg-wks-server_2.2.40-1.1+deb12u2_mipsel.deb a405b4d7566fddb9b5f61cd6e8b70d2d61bd8be0ce1f9fb4fbda8cf8276950cc 907676 gpg_2.2.40-1.1+deb12u2_mipsel.deb 19a18db51f7e2c33f562683ccc701c5c17991cfa2b89155333b8e0b8f3023daf 391684 gpgconf-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb d2452c65afe0bd8dda80e2ee05afafdc72fa588ef987a9f37b1013cece9cb75d 559064 gpgconf_2.2.40-1.1+deb12u2_mipsel.deb 6d7c37dc644f932cf4f24b0f6b94600963d015bc0ab26a5430e8f77149e9e258 656136 gpgsm-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 68782b25fc64d5e4d1dacb032015bab7efdc74def0e953936d7fe3f0ae979fa5 651888 gpgsm_2.2.40-1.1+deb12u2_mipsel.deb 2e51176af880bbf81fe2c99f691b0d5820cc59103c47d56a47d4bc78db4c478e 622076 gpgv-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 22c86579bab6dfca5be89d4e882b2cacaf920d23e57404197bccca620bb5d1a7 675620 gpgv-static-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 899c4d7ff573a0539d534342a991a43ed37295bc50f7d10c6808f5d6d4400974 1397144 gpgv-static_2.2.40-1.1+deb12u2_mipsel.deb 51db631b24b6a54ff56f73d82dffc8ee978e617debcfdb10fa66b025284facd6 187264 gpgv-udeb_2.2.40-1.1+deb12u2_mipsel.udeb 738b762b4266637bd4d0b501106fcdd45f1e2c8d667bb674711688e15b9f5546 635816 gpgv_2.2.40-1.1+deb12u2_mipsel.deb 30b64e50eff46b7db9fafd5d86ef81f25722acff8877df3f9ef16046631299fc 587588 scdaemon-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 5280ccd7cf8a63000035e99208895a12f100ae5e6d1439e820ecfb00fd698762 631104 scdaemon_2.2.40-1.1+deb12u2_mipsel.deb Files: d101cbcb0051d88c117b75ebc247dbfe 999656 debug optional dirmngr-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb a98708ba36fa1f4c7608d10e5d8f67c8 778028 utils optional dirmngr_2.2.40-1.1+deb12u2_mipsel.deb 0d6e34cb7194cf3bbad83373a1b95a29 1644320 debug optional gnupg-utils-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb dec4047dc496c05ca43904396fb2ad24 888188 utils optional gnupg-utils_2.2.40-1.1+deb12u2_mipsel.deb adc9ccc9bf51ce5077a8db4c7f7caf07 16822 utils optional gnupg2_2.2.40-1.1+deb12u2_mipsel-buildd.buildinfo 5396a7d14199fd3330661e93ec0aec30 980348 debug optional gpg-agent-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 62ddb053253c0605aa806aa158129cb2 677876 utils optional gpg-agent_2.2.40-1.1+deb12u2_mipsel.deb 4304eaa4efc4d0e98bd7caad931386bf 1296216 debug optional gpg-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 06e1a39cb3caa723736ecb8bab2ea127 313528 debug optional gpg-wks-client-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb b09d924d7eada55c8741ef0214dcde71 535576 utils optional gpg-wks-client_2.2.40-1.1+deb12u2_mipsel.deb ca1035f34760eb20fb85a6590c2e1ad4 286880 debug optional gpg-wks-server-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 540149c9f1f4a15b9d1c8dcc6867f353 526660 utils optional gpg-wks-server_2.2.40-1.1+deb12u2_mipsel.deb 18542b6da1ed64bbab5c32d9ceb30794 907676 utils optional gpg_2.2.40-1.1+deb12u2_mipsel.deb 110cb494b0885512e2fd61468d2c12ff 391684 debug optional gpgconf-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 63c18f39558bfc405f789f61089719c4 559064 utils optional gpgconf_2.2.40-1.1+deb12u2_mipsel.deb 71f93e2a4c09265371508acfa4d23703 656136 debug optional gpgsm-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 08a514937828fac49c3dd192ccc04c5e 651888 utils optional gpgsm_2.2.40-1.1+deb12u2_mipsel.deb 2115049c7f77e525b4201dab26baa617 622076 debug optional gpgv-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 3ef3ff03202fd424859b062be2d73706 675620 debug optional gpgv-static-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb e74f15b9a7a5169d8112c6742a95f337 1397144 utils optional gpgv-static_2.2.40-1.1+deb12u2_mipsel.deb d0acd7d62790e4ae201931ce67142c32 187264 debian-installer optional gpgv-udeb_2.2.40-1.1+deb12u2_mipsel.udeb d11ef8d3a57a753244b730b04c287af4 635816 utils important gpgv_2.2.40-1.1+deb12u2_mipsel.deb 5f73be294df14ba86d63874a0ca7e2cd 587588 debug optional scdaemon-dbgsym_2.2.40-1.1+deb12u2_mipsel.deb 79c9f47bf44ed4f8f2b24969e5b8390c 631104 utils optional scdaemon_2.2.40-1.1+deb12u2_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYLhEzFkGpb3yYRVHmlVdU6AM9BUFAmlYYaYACgkQmlVdU6AM 9BUaAg//VrlAbiAlQThEcqDrHoyAlj4qiXDuxZL+kg8Wi1A8kwUncS6PFjZNYItz UqekgES7o5JWbA7weneIKKaoAPOV06VnpDw1Hz13OWT3UQ8HsSPAdAujYRJa2oW+ OhKIe6RfYeNRn343VT8gc2eS7NJuWRj2+kEWOqZyLd7TizEQsOuoXSzXjvSo0Z25 AqrLd9LgAc/zBlcqW5lOrvggHssCw5JvkhYMn5YfPDFfzxELRARq4Bc66jxph5F7 sIOG6AvVTaO6UFmF/uFM3G60XuoHTg1BdtJwKLXqpCRO3Ty+aI31+Jcn46WoINcl gwQmC/VcthcdC6pDFG6aGdlAp6vpNxeNXGLLH/l7d/bqoOzZH1T6fLtpsBHfdMJv /oC0dJqCvzgL2aqXBo5UHb5wXjYb0yyE9NUg6OudQianpCAwlduCYqGuDuEsVzbw Q5vYUtsr9jgiUeWfP2wc1/bINigmoZ9AjCbYRZjBSilOPa7i5WwDhtQb3tt7kuGK TPs8YHuKZDg2x6F/WVvgGPV0RI+X7OrA7Vcu/0ob0hVsSWx1m2AJvt1wMxyeJiR6 YjvaTNqGFrxoVtJ/ttLalzwSw90Q9kUf2bKOxbPb0DHI1+bCw4f5UsmoKNQaeoix ijChY8KqMNoHijrT2epGIeyC52hMqx6vmxoErUAsLzcvRhdVO3E= =s+0/ -----END PGP SIGNATURE-----