[Pkg-gnupg-maint] gnupg_1.4.16-1.2_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Jun 2014 17:02:35 +0200
Source: gnupg
Binary: gnupg gnupg-curl gpgv gnupg-udeb gpgv-udeb gpgv-win32
Architecture: source all amd64
Version: 1.4.16-1.2
Distribution: unstable
Urgency: high
Maintainer: Debian GnuPG-Maintainers <pkg-gnupg-maint at lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil at debian.org>
Description:
 gnupg      - GNU privacy guard - a free PGP replacement
 gnupg-curl - GNU privacy guard - a free PGP replacement (cURL)
 gnupg-udeb - GNU privacy guard - a free PGP replacement (udeb)
 gpgv       - GNU privacy guard - signature verification tool
 gpgv-udeb  - minimal signature verification tool (udeb)
 gpgv-win32 - GNU privacy guard - signature verification tool (win32 build)
Closes: 752497
Changes:
 gnupg (1.4.16-1.2) unstable; urgency=high
 .
   * Non-maintainer upload with maintainers approval.
   * CVE-2014-4617: Avoid DoS due to garbled compressed data packets.
     Apply upstream commit to stop a possible DoS using garbled compressed
     data packets which can be used to put gpg into an infinite loop.
     (Closes: #752497)
Checksums-Sha1:
 ae7b458e3e6ba670e7dd384d802a4aa99949ca51 2357 gnupg_1.4.16-1.2.dsc
 2f1a1841e115cb1795a2cab6e85bdb59a9a17777 26304 gnupg_1.4.16-1.2.debian.tar.xz
 8cfc65694c2b6dffaec8b768a5eeaaab01e18b93 554394 gpgv-win32_1.4.16-1.2_all.deb
 7fba7b099eac444d5fd0a2f2946c13d5160a0508 1133248 gnupg_1.4.16-1.2_amd64.deb
 222124276101a422bb65328415acae5bf6ea3401 61808 gnupg-curl_1.4.16-1.2_amd64.deb
 41e6b870f88b398b4cda90b2edb32e9053c729f7 203930 gpgv_1.4.16-1.2_amd64.deb
 d4603906b919af8c1a01df78fb5df9481b3135bc 356804 gnupg-udeb_1.4.16-1.2_amd64.udeb
 c069a9e11561e26beb0a176b844a3ab79eedf2fa 131706 gpgv-udeb_1.4.16-1.2_amd64.udeb
Checksums-Sha256:
 e6b1ba501ec7cb65eea015b667ecd826a4fb2877941eea9c7072e4a99a7ed7c3 2357 gnupg_1.4.16-1.2.dsc
 a96064cc3888830527e2b464cfab27c8c1381e03a1e02a9d5a7b8133db77aad9 26304 gnupg_1.4.16-1.2.debian.tar.xz
 94044675a9ec32cf5cbb669847a4d8cc336ad4fa48752cd48c67ecf7c5339593 554394 gpgv-win32_1.4.16-1.2_all.deb
 ba27e1381bac0dfada510b679d45ca5e65f5edc3d2a73b065c039c04abe54f00 1133248 gnupg_1.4.16-1.2_amd64.deb
 42d0c033c5a7974a03e99c0076790a0cd0fee0fe24af3280194239e5383d1c31 61808 gnupg-curl_1.4.16-1.2_amd64.deb
 7406eebc048ca853adfa69502ac0c3e54ebb14f39915ec86fa28199f53400ef2 203930 gpgv_1.4.16-1.2_amd64.deb
 088f18240c4a9aebc017483f13090a08e0364e32ab3a49d2e6b008a2d2f66558 356804 gnupg-udeb_1.4.16-1.2_amd64.udeb
 75c04d83a7b449398a809a64def9de52dfd27e4f1471d32a98d2622f32334b7e 131706 gpgv-udeb_1.4.16-1.2_amd64.udeb
Files:
 158bf0295ca109d2e284ef5255424471 554394 utils extra gpgv-win32_1.4.16-1.2_all.deb
 27c36735cdda45c772f919cbdbf29741 1133248 utils important gnupg_1.4.16-1.2_amd64.deb
 85574af07dd1f28558848c9e11d74253 61808 utils optional gnupg-curl_1.4.16-1.2_amd64.deb
 b971fa9749cec80ee2587508347050fa 203930 utils important gpgv_1.4.16-1.2_amd64.deb
 0a1e6f94a0c2861abddbbf6f0d904d54 356804 debian-installer extra gnupg-udeb_1.4.16-1.2_amd64.udeb
 962f159660832265f1c336fdee0dfb67 131706 debian-installer extra gpgv-udeb_1.4.16-1.2_amd64.udeb
 e679c066263e43145e922012521eaec0 2357 utils important gnupg_1.4.16-1.2.dsc
 36f11376efcf34caefcc63edba4af12e 26304 utils important gnupg_1.4.16-1.2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=lNfs
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.