-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 29 Dec 2020 15:48:30 +0100 Source: p11-kit Binary: libp11-kit-dev libp11-kit0 libp11-kit0-dbgsym p11-kit p11-kit-dbgsym p11-kit-modules p11-kit-modules-dbgsym Architecture: mips64el Version: 0.23.15-2+deb10u1 Distribution: buster-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-manda-04) Changed-By: Salvatore Bonaccorso Description: libp11-kit-dev - library for loading and coordinating access to PKCS#11 modules - libp11-kit0 - library for loading and coordinating access to PKCS#11 modules - p11-kit - p11-glue utilities p11-kit-modules - p11-glue proxy and trust modules Changes: p11-kit (0.23.15-2+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix bounds check in p11_rpc_buffer_get_byte_array (CVE-2020-29362) * Check attribute length against buffer size (CVE-2020-29363) * Check for arithmetic overflows before allocating (CVE-2020-29361) * Follow-up to arithmetic overflow fix (CVE-2020-29361) Checksums-Sha1: c0ece57febc0797ee3006e041ca3ce34d5d8ea0f 195656 libp11-kit-dev_0.23.15-2+deb10u1_mips64el.deb cfc4208453bd3ca287b0aab5412270cf8101ae76 1256388 libp11-kit0-dbgsym_0.23.15-2+deb10u1_mips64el.deb 836b3b8e6a1b8b411286b3b0fe766f009ae72b84 256972 libp11-kit0_0.23.15-2+deb10u1_mips64el.deb f3fc56d96bb774fad073e80c438dc8f41c95863b 317540 p11-kit-dbgsym_0.23.15-2+deb10u1_mips64el.deb af56508f8a68b13b6bb9c50b5f4d8d31c8d50074 1401792 p11-kit-modules-dbgsym_0.23.15-2+deb10u1_mips64el.deb 042d74081a9d1a4a5a87c7659a91eb4d727e5ff2 162064 p11-kit-modules_0.23.15-2+deb10u1_mips64el.deb 07fa4ff9687539db471233c3ec65090d2d06ed05 8170 p11-kit_0.23.15-2+deb10u1_mips64el-buildd.buildinfo 2225ea6949aae69ce2c2aa5de366d61f8c760081 264660 p11-kit_0.23.15-2+deb10u1_mips64el.deb Checksums-Sha256: bd9a3b40e3c60bd1af2a1727183a81fc579757c7be6f4be046257bb502af778b 195656 libp11-kit-dev_0.23.15-2+deb10u1_mips64el.deb 4c78648c00c6b36641c8787c0000c63f23a3a08ba100f83f60040a5d77a5ae40 1256388 libp11-kit0-dbgsym_0.23.15-2+deb10u1_mips64el.deb 575a433baa0c9289cdd691bdba244cfa895cdbb053e3835bda64851d41e3ec5c 256972 libp11-kit0_0.23.15-2+deb10u1_mips64el.deb 5654c66b3697ab6f13b8c78989074fcd4fe17acebba5962c03c505810f44110e 317540 p11-kit-dbgsym_0.23.15-2+deb10u1_mips64el.deb fbef8ba0681681d7460b1d8961eeabc526af542f47267d03f627b80edc768a0c 1401792 p11-kit-modules-dbgsym_0.23.15-2+deb10u1_mips64el.deb 34c4d618b94a07c8e7ea52dbb9cd4203f227cd704eb9952947ecfc3d3e785e86 162064 p11-kit-modules_0.23.15-2+deb10u1_mips64el.deb ba1c38abb0fd94eb72608bfee1b3ae4f044f1a1da2681444e8f46e19e2fd1790 8170 p11-kit_0.23.15-2+deb10u1_mips64el-buildd.buildinfo 89399f6a6508b29de348188a0e79fae6900da6d8dee64c64f73e87c1159a2a85 264660 p11-kit_0.23.15-2+deb10u1_mips64el.deb Files: d0716c087578e433eb32e54e87e55cf3 195656 libdevel optional libp11-kit-dev_0.23.15-2+deb10u1_mips64el.deb 12c0a3bfc9f4270d02b7397486ace0a5 1256388 debug optional libp11-kit0-dbgsym_0.23.15-2+deb10u1_mips64el.deb d748fb7e9c5ee9293ecbc72b3e1c527e 256972 libs optional libp11-kit0_0.23.15-2+deb10u1_mips64el.deb 83f2065d2ba7ea733d0c4f342abfb4a8 317540 debug optional p11-kit-dbgsym_0.23.15-2+deb10u1_mips64el.deb 0e3ca52dfe90866592314b84defad8df 1401792 debug optional p11-kit-modules-dbgsym_0.23.15-2+deb10u1_mips64el.deb ed6f236cdccb92b942041bb3dd8eb648 162064 misc optional p11-kit-modules_0.23.15-2+deb10u1_mips64el.deb 687f39d35463202aca4377a75adfa869 8170 libs optional p11-kit_0.23.15-2+deb10u1_mips64el-buildd.buildinfo 5dc977b9cb54c682b4beccff35ddbf01 264660 misc optional p11-kit_0.23.15-2+deb10u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3ScFd/C5XooG8cTOSlWhEcfpBVMFAl/rhgkACgkQSlWhEcfp BVNsBxAAnOHjiw2Ol9j7N6WZo30PJ56jmf5TbYIQdkqYTE7NAvFA091WITFNpT9i jfVmQYymeuLuXjwmyYCIlfAaszh0OeccrmsS3mNr4qtSJPvUpTApluWeATl94os1 Z3vzfHNpT/XYMX3+fYT0hpNegonkFsLfeU9qraLqNzjKuNDPlxs6Y+gx0IpCom/Y I7kBG+MLlGpzj4IXm2Kbm2I/cHXMyhIm0DlKzYn61i1Ijt2c2ZFCMs3cclYwILtu nHJZK4EVoLga9Q5IL5uZ0BtWhDtom6uS4l3SrigdZHZUEaogOgn2RCJxH8G7pThw n/7EHgWWCHWF2DvIIOFDRYKhcdgMtKPVMftQmWXHq6iTusy1AG12aD6BimUKzCBj ZUI2ANO2cbmqugd8hSENX80BzfpUSpveVK/ovWpKRna3aWzbuCYNEfhmsEzEZMyp uXa9oVyA1ffxgKIPxlhS5V1k6/6tuGxkuQd1pyNHUVJt4nGimHMOQreUY7GJHo8y vV82dmsWtxYg97yzlym2um8v5/l8g+1KlHM4a8ggUNq+jvQZX360f6EGgSFxmQHf qVURNnQkHWrtL8ZHsCYTq0VRCmPGsPi0v+rFO5YDUz80TGHxZc0ABQVoCid+6wMF wxMK8KxEoI/cDgpdApyDJq5z8dlChzIRNaj7IhMXaWNbuThktgg= =RCOX -----END PGP SIGNATURE-----