-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 19 May 2026 21:41:39 +0200
Source: libgcrypt20
Architecture: source
Version: 1.11.0-7+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 libgcrypt20 (1.11.0-7+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * cipher:ecc: Fix decoding a point on Montgomery curve. (CVE-2026-41989)
Checksums-Sha1:
 f76b859771f52513980cec88c41b9d61d20d89e6 3149 libgcrypt20_1.11.0-7+deb13u1.dsc
 dd2c68e0685bb99249efeeb06046fae15b5214ba 4180345 libgcrypt20_1.11.0.orig.tar.bz2
 8f67baf118e060414f24eeaad8028a5ab396ad98 228 libgcrypt20_1.11.0.orig.tar.bz2.asc
 66f90a6fdb4f496e76038f57c20254c59e56af22 40944 libgcrypt20_1.11.0-7+deb13u1.debian.tar.xz
 0964915e97663d1f4d9306107e45a7d48057670d 6208 libgcrypt20_1.11.0-7+deb13u1_source.buildinfo
Checksums-Sha256:
 727fae4a95bafe8b2094f75d880d3c63f8066865cb552422492cafd675887c80 3149 libgcrypt20_1.11.0-7+deb13u1.dsc
 09120c9867ce7f2081d6aaa1775386b98c2f2f246135761aae47d81f58685b9c 4180345 libgcrypt20_1.11.0.orig.tar.bz2
 9fedf4f7bb80d5178d4e26ec2f03ba5fc44eddfc72c2e9966d7d619aeee3df2c 228 libgcrypt20_1.11.0.orig.tar.bz2.asc
 08deb210f65066655791c8d2f1b1a40907abce6e0e0e07e6d2942426c5b4f3b8 40944 libgcrypt20_1.11.0-7+deb13u1.debian.tar.xz
 274aa526ec3bc7a8f0d266164348f2a2b880ec600624dc2d5bec4164e043fb20 6208 libgcrypt20_1.11.0-7+deb13u1_source.buildinfo
Files:
 836a77efefbb44b1a87e229b0d617fc6 3149 libs optional libgcrypt20_1.11.0-7+deb13u1.dsc
 321c4975cfd6a496f0530b65a673f9a4 4180345 libs optional libgcrypt20_1.11.0.orig.tar.bz2
 268767dc35fd170632e621ca6ce89c4a 228 libs optional libgcrypt20_1.11.0.orig.tar.bz2.asc
 fdb3987218c24c834255aa7af20c89b8 40944 libs optional libgcrypt20_1.11.0-7+deb13u1.debian.tar.xz
 58eb9a9cb75689848a6d9deb6ac36474 6208 libs optional libgcrypt20_1.11.0-7+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=q7Ah
-----END PGP SIGNATURE-----