-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 29 Dec 2020 15:48:30 +0100 Source: p11-kit Binary: libp11-kit-dev libp11-kit0 libp11-kit0-dbgsym p11-kit p11-kit-dbgsym p11-kit-modules p11-kit-modules-dbgsym Architecture: ppc64el Version: 0.23.15-2+deb10u1 Distribution: buster-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-unicamp-01) Changed-By: Salvatore Bonaccorso Description: libp11-kit-dev - library for loading and coordinating access to PKCS#11 modules - libp11-kit0 - library for loading and coordinating access to PKCS#11 modules - p11-kit - p11-glue utilities p11-kit-modules - p11-glue proxy and trust modules Changes: p11-kit (0.23.15-2+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix bounds check in p11_rpc_buffer_get_byte_array (CVE-2020-29362) * Check attribute length against buffer size (CVE-2020-29363) * Check for arithmetic overflows before allocating (CVE-2020-29361) * Follow-up to arithmetic overflow fix (CVE-2020-29361) Checksums-Sha1: ae4a2d5a110dcb1db5f7e24ecb07b27bb3c2bd5c 195640 libp11-kit-dev_0.23.15-2+deb10u1_ppc64el.deb 2c959db1a05e11c9f28e532c85ac8fd46ca31813 1010632 libp11-kit0-dbgsym_0.23.15-2+deb10u1_ppc64el.deb 237fcf44eebe8fb9cdde86fbd66998afff7fb9e9 316368 libp11-kit0_0.23.15-2+deb10u1_ppc64el.deb bf1576e17b8cf4d549f3743aff4fcf3fbd476ad7 310492 p11-kit-dbgsym_0.23.15-2+deb10u1_ppc64el.deb b3736ac8554594254cc03d225c5b5479533d4ba8 1154016 p11-kit-modules-dbgsym_0.23.15-2+deb10u1_ppc64el.deb 5751b3a57fd86beb1f227994cfee406d6d10526b 228080 p11-kit-modules_0.23.15-2+deb10u1_ppc64el.deb 15d4c5415bd8761338bac396858f81f4de8c0852 8287 p11-kit_0.23.15-2+deb10u1_ppc64el-buildd.buildinfo 6d4921b802887b4cbb82b0013dc65fabaa103592 276220 p11-kit_0.23.15-2+deb10u1_ppc64el.deb Checksums-Sha256: f42bb4b9737406cd61e6bdbe0a3ecdd8fd1878668afe4f189764e9213503aa93 195640 libp11-kit-dev_0.23.15-2+deb10u1_ppc64el.deb 4fe3c5d00be13cc2d997b21d4df87769bf9d041de6abf20fa916b00bf0548445 1010632 libp11-kit0-dbgsym_0.23.15-2+deb10u1_ppc64el.deb 19a6c4eef5b88d4dffc406a869595dad1b768ba068dc4de1a646347c95f6adbf 316368 libp11-kit0_0.23.15-2+deb10u1_ppc64el.deb dfb6aa03e845ed54b1d7b1ccf1a43a41217bfd6ce87603c5ee2ee35d59199000 310492 p11-kit-dbgsym_0.23.15-2+deb10u1_ppc64el.deb 3e54805f6910fb990570b2043e2b73a859c0e19d08c1673ce3c6b677f5be2e7a 1154016 p11-kit-modules-dbgsym_0.23.15-2+deb10u1_ppc64el.deb 42f1c6e86f0433b6d5ada791920342b487338d8500ffb525d65c802dc78d5a84 228080 p11-kit-modules_0.23.15-2+deb10u1_ppc64el.deb bc7e3d10fdd3cbcbb51eca109fc736e183112e6def35a0f393498f69a87de384 8287 p11-kit_0.23.15-2+deb10u1_ppc64el-buildd.buildinfo 3e1bd428da41d766c068446078ee34c62657bb9c0bae605e6269a8b9817b7708 276220 p11-kit_0.23.15-2+deb10u1_ppc64el.deb Files: b445beab26c8d548c5e21a21809dd211 195640 libdevel optional libp11-kit-dev_0.23.15-2+deb10u1_ppc64el.deb e73e3d1379b98aa158ec16727cb53e0a 1010632 debug optional libp11-kit0-dbgsym_0.23.15-2+deb10u1_ppc64el.deb 1315f7ecd0a919636d90e33b04e17481 316368 libs optional libp11-kit0_0.23.15-2+deb10u1_ppc64el.deb e482aa391ac63b6f61d5b0194ccdeb13 310492 debug optional p11-kit-dbgsym_0.23.15-2+deb10u1_ppc64el.deb 1cbf72af4087a43666eed55a27c23f19 1154016 debug optional p11-kit-modules-dbgsym_0.23.15-2+deb10u1_ppc64el.deb 666391807db316540bc18026c45db787 228080 misc optional p11-kit-modules_0.23.15-2+deb10u1_ppc64el.deb 709e43bac84d6db4794913a06042ff7b 8287 libs optional p11-kit_0.23.15-2+deb10u1_ppc64el-buildd.buildinfo 8ce17915352fa17d9b8b35644e739874 276220 misc optional p11-kit_0.23.15-2+deb10u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKzbeWucQH7PwwtgznSwNtUaaPI8FAl/rR2AACgkQnSwNtUaa PI+0lxAAim8KvVxA/2irm9oLgczj0lwPynbJBntbBqx0kQSlFQuYgXPJ/ClLhc0/ wIcCGyfSOQQXRZ6oqLkThZQucfGEVd0tqx5JVw3QtEr61l1zR6fqjJbIGhHeiA1l lSKXuQmc0FgwD7ot1EJkySbtljyf5I6+4Yo41bveCRYPM2OWeUV+mQsz8YEW2JcG Y7yI3H5qnjEBwu7EnjNZ+YzmLKQOnQ+8gbCRcQHxZW0UfJJqyraGU7SEaYa21Vhh CaSkvBuL96x8W1Us7lqbyzFqHFgV1ZjbNmgJZYyCdSRhm7ywmBLWKw6KM6GjMod4 WswPNJe3DsMzFHGhM70nyeKnjVcZw330U8eyh7v47H4QoyQtmzIbYh7rLhtOlpCb X/chR5SCOFh6P1oA3dneaYJFCiUpvVv8DQdVJAdui1uuAyK38D8Vh4ZMsy2f//0Q QKOz1o1JNY9kKSu2RPMd5xst7qKMkupOv5tQlI4os77/AWLdPsv+bW20b/5TG5TC h0p50Zuff61VEpsycJaH/T5SuywAKZgbnP9psekHIxV6VCG5nw2sihanqky6kcD8 W9cnOmtshSzKT3qP+oEurzYPS9bnBcYAoaYDlnxO3X1QCwkWan2iiKI5ZV0SrKT5 p6J/lxZfw9TsoUD5kqVNwMsDzU9gd9G7W4HVbhFerThrZTx2hAo= =KI9t -----END PGP SIGNATURE-----