-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 19 May 2026 21:55:38 +0200
Source: libgcrypt20
Architecture: source
Version: 1.10.1-3+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 libgcrypt20 (1.10.1-3+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cipher:ecc: Fix decoding a point on Montgomery curve. (CVE-2026-41989)
Checksums-Sha1:
 358070fc5b52895f39098efcf51463d97e33da79 2975 libgcrypt20_1.10.1-3+deb12u1.dsc
 de2cc32e7538efa376de7bf5d3eafa85626fb95f 3778457 libgcrypt20_1.10.1.orig.tar.bz2
 8c734e7300a7c297eaf32652cdc3c6c25293b9a9 228 libgcrypt20_1.10.1.orig.tar.bz2.asc
 a42ef8ad0f92181d29cef17d25fea0e74524a9d2 41076 libgcrypt20_1.10.1-3+deb12u1.debian.tar.xz
 ef2697fd15efeb08622c974e492bddeadda28fcb 6208 libgcrypt20_1.10.1-3+deb12u1_source.buildinfo
Checksums-Sha256:
 1bd12e7e03f5c60177a65ba4b838466033eaeca191111c570d444104d0d6e6d3 2975 libgcrypt20_1.10.1-3+deb12u1.dsc
 ef14ae546b0084cd84259f61a55e07a38c3b53afc0f546bffcef2f01baffe9de 3778457 libgcrypt20_1.10.1.orig.tar.bz2
 9da6ae5e8b1c253607be7e951b568932740c143ee519f6b3392ece8211e84e33 228 libgcrypt20_1.10.1.orig.tar.bz2.asc
 a827828973467fe4469729c51124a2b8a8682911369840f66842816190bd7e6c 41076 libgcrypt20_1.10.1-3+deb12u1.debian.tar.xz
 a816f2143b03f3129e1e4d12751d51d45c49a14966ba66c10ed59e60b71855eb 6208 libgcrypt20_1.10.1-3+deb12u1_source.buildinfo
Files:
 8a071962557e3a27c8c12107c407ba78 2975 libs optional libgcrypt20_1.10.1-3+deb12u1.dsc
 8fadbe1fddafa341dce5ef3869f70e25 3778457 libs optional libgcrypt20_1.10.1.orig.tar.bz2
 17d95645c8a7a3dfcf28e7592d06b2bf 228 libs optional libgcrypt20_1.10.1.orig.tar.bz2.asc
 7b85b5b8b4242a4fe4397dfd8b502384 41076 libs optional libgcrypt20_1.10.1-3+deb12u1.debian.tar.xz
 277411c7215bbc6f2ea39750a96b68e8 6208 libs optional libgcrypt20_1.10.1-3+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=h+zH
-----END PGP SIGNATURE-----