-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 29 Dec 2020 15:48:30 +0100 Source: p11-kit Binary: libp11-kit-dev libp11-kit0 libp11-kit0-dbgsym p11-kit p11-kit-dbgsym p11-kit-modules p11-kit-modules-dbgsym Architecture: arm64 Version: 0.23.15-2+deb10u1 Distribution: buster-security Urgency: high Maintainer: arm Build Daemon (arm-arm-04) Changed-By: Salvatore Bonaccorso Description: libp11-kit-dev - library for loading and coordinating access to PKCS#11 modules - libp11-kit0 - library for loading and coordinating access to PKCS#11 modules - p11-kit - p11-glue utilities p11-kit-modules - p11-glue proxy and trust modules Changes: p11-kit (0.23.15-2+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix bounds check in p11_rpc_buffer_get_byte_array (CVE-2020-29362) * Check attribute length against buffer size (CVE-2020-29363) * Check for arithmetic overflows before allocating (CVE-2020-29361) * Follow-up to arithmetic overflow fix (CVE-2020-29361) Checksums-Sha1: a918f6ea547515e232d360b21d9035a221c18c49 195664 libp11-kit-dev_0.23.15-2+deb10u1_arm64.deb 7940a899473522879e0c8566b8de3fc28dadf62a 1258428 libp11-kit0-dbgsym_0.23.15-2+deb10u1_arm64.deb d3f7240fba2d7a15df79139cba5e550c56043fec 303144 libp11-kit0_0.23.15-2+deb10u1_arm64.deb e568f45d1fe245736aa0c3b23f46c850025b831e 307448 p11-kit-dbgsym_0.23.15-2+deb10u1_arm64.deb 5c6b35623f260009e35456dc2c27a093af4e0d14 1393812 p11-kit-modules-dbgsym_0.23.15-2+deb10u1_arm64.deb ff98468483878c92a966f24a55dedf9d12cbf909 205892 p11-kit-modules_0.23.15-2+deb10u1_arm64.deb f397e51532395d7951d1cab898dbaddd8094398e 8210 p11-kit_0.23.15-2+deb10u1_arm64-buildd.buildinfo ed5229c317ad77d595f46699db95bc9a7af4715d 265656 p11-kit_0.23.15-2+deb10u1_arm64.deb Checksums-Sha256: 8fcd2fa979d949cb4b3a20c6d00ebc6e94891e107fac1c3eecdf348dc4524175 195664 libp11-kit-dev_0.23.15-2+deb10u1_arm64.deb eead112d2ee81fe0d21f9ba5740c3d1e2b80f64876116b905ab36173b816e3fa 1258428 libp11-kit0-dbgsym_0.23.15-2+deb10u1_arm64.deb 986b82c8afd990b16effde20447cefedd5412bb28031cb3230147d90ade7dab4 303144 libp11-kit0_0.23.15-2+deb10u1_arm64.deb d94d354c0fe0ae2698e7e43d866fb903443b6f5e1c79859f03949272a6b010c0 307448 p11-kit-dbgsym_0.23.15-2+deb10u1_arm64.deb 5f17d8e66ebc78eb20c660bc15447d83dc393015b5dcb30c1254717a172b6b18 1393812 p11-kit-modules-dbgsym_0.23.15-2+deb10u1_arm64.deb 8510991ed4fc1f9e1ace608b72dac1fa56c3d567f9792b62cc3c1db89d240125 205892 p11-kit-modules_0.23.15-2+deb10u1_arm64.deb 4b4b3da966ea1eecf4a06f45a11bb2a7d8c91d71938ea56084c0306e0a85a836 8210 p11-kit_0.23.15-2+deb10u1_arm64-buildd.buildinfo 206fe0a8a7b469479557b2f82796c0420b833f56bbbfc1af7f8e62d6daa89a63 265656 p11-kit_0.23.15-2+deb10u1_arm64.deb Files: 05fdee845e76ed66a85dc2586d87f2a5 195664 libdevel optional libp11-kit-dev_0.23.15-2+deb10u1_arm64.deb 0de03f5b939452a343f627cb8b3ec897 1258428 debug optional libp11-kit0-dbgsym_0.23.15-2+deb10u1_arm64.deb 7df31fb3a955db11b5572fd736b91511 303144 libs optional libp11-kit0_0.23.15-2+deb10u1_arm64.deb e93db5a51ee53d5b3fa57c45edd7d489 307448 debug optional p11-kit-dbgsym_0.23.15-2+deb10u1_arm64.deb 69ccda68a9a700f5fa98dbef6fe86993 1393812 debug optional p11-kit-modules-dbgsym_0.23.15-2+deb10u1_arm64.deb 97f6a3eb1817bbf2746690c82dc67d58 205892 misc optional p11-kit-modules_0.23.15-2+deb10u1_arm64.deb c3e9e7a02daae50564740a05752a8f96 8210 libs optional p11-kit_0.23.15-2+deb10u1_arm64-buildd.buildinfo c99442da6594a39807a9cdd385e077a9 265656 misc optional p11-kit_0.23.15-2+deb10u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERSHeCaz1VetCmLWuPwOtoMI3ZYAFAl/rR2sACgkQPwOtoMI3 ZYCWbRAAm8KTy3YTHbfyt3ts13WwoKIdDt5TYqlZy49W+LeE2JtH7eNJVWrAzJG+ iBTWHQ7dd2v3NdOpb+Nf5BHzCWBHz+mm2wnGdoIIg0TIYmHpGeVBpWqxc2naYm9R lWOMz4kWGvwdzUIz9SrNUx3P+TmaZFOVDdHS67rThYOmW60hBqpR6MxyrH+KOOPv 7L1RYTKZ1e/fh+UbhfSUYKXLnr3c1UIpu6I/p//XtTpeXhmjOZBJLW2la51HVFbU FhcdpS4FnppaUY4i/PD7Uq2rmGET+z1f2gMQqGTcy5ekaEle8+B0CG5+zE5+RXix Am0tBhjVECg9fYCiqOaeR6mIVJT1QTNO8BW9VwH1DLEYHjkTwOCaPfo/K4mqvzCK GdjKnQUJD45hxkQXZRew3YptPjzKP85xDHwn0SNv20lraP0u15yIrDaPQiz8WZDR iSGz6kbtPGd3xm5gllJllX8B8Ha35IQ1W0XffHRjnH0K8doyDtplTo1CLpcNxRlY EVOlZRphl69D4l9nPsDlnFVlqp0RAynYgxN0f0EEdXb0UsY2CPLSQzbq8kbom4kY /062iaYftpDPHsC5DbO1bT3bY6zQ1xknjLPSQz8gR2W6tKxNf0lFj5RooHBkxP7a Sxmd1S5R1uUqGXYmG3e7sE/eJLemZoO+rV7e1P9rB7l3IkvYet4= =09I8 -----END PGP SIGNATURE-----