libgcrypt20 (1.12.0-2ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflow via crafted ECDH ciphertext
    - debian/patches/CVE-2026-41989.patch: cipher:ecc: Fix decoding a point on
      Montgomery curve. in cipher/ecc-misc.c.
    - CVE-2026-41989
  * SECURITY UPDATE: Dilithium signing mishandling
    - debian/patches/CVE-2026-41990.patch: cipher:dilithium: Check the label
      length by caller. in cipher/dilithium.c, cipher/dilithium.h,
      cipher/pubkey-dilithium.c.
    - CVE-2026-41990

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 12 May 2026 11:01:30 +0200

libgcrypt20 (1.12.0-2) experimental; urgency=medium

  * update to GIT HEAD.

 -- Andreas Metzler <ametzler@debian.org>  Thu, 05 Feb 2026 18:14:30 +0100

libgcrypt20 (1.12.0-1) experimental; urgency=medium

  * New upstream release.
  * Unfuzz patches, drop superfluous ones
  * Add new function gcry_kem_genkey() to symbol file.
  * Bump libgpg-error-(mingw-w64-)dev b-d.
  * Update copyright info.
  * Set all symbol reqs to 1.12.0, new PK algo ML-DSA added.
  * Update algorithm list in package description.
    (Source: https://www.gnupg.org/software/libgcrypt/index.html)
  * [lintian] drop Priority: optional from debian/control.
  * [lintian] drop redundant Rules-Requires-Root: no.
  * Bump Standards-Version.

 -- Andreas Metzler <ametzler@debian.org>  Sat, 31 Jan 2026 12:55:34 +0100

libgcrypt20 (1.11.2-3) unstable; urgency=low

  * Update to head of LIBGCRYPT-1.11-BRANCH
    + 30_0001-Post-release-updates.patch
    + 30_0002-mpi-Fix-redefinition-of-types.patch
    + 30_0003-random-jent-Fix-for-jent_rng_is_initialized.patch
    + 30_0004-random-jent-Fix-build-with-address-sanitizer.patch
    + 30_0005-secmem-Handle-HAVE_BROKEN_MLOCK-for-the-case-with-AS.patch
    + 30_0006-cipher-aria-Fix-compiler-error-on-NetBSD.patch

 -- Andreas Metzler <ametzler@debian.org>  Thu, 06 Nov 2025 13:46:54 +0100

libgcrypt20 (1.11.2-2) unstable; urgency=medium

  * Upload to unstable.

 -- Andreas Metzler <ametzler@debian.org>  Mon, 11 Aug 2025 13:20:44 +0200

libgcrypt20 (1.11.2-1) experimental; urgency=medium

  * New upstream release.
    + Drop 30_add_missing_file_from_GIT.diff.
    + Fixes FTBFS with gcc-15 on ppc64el and probably (no porter machine)
      also on alpha. Closes: #1109071

 -- Andreas Metzler <ametzler@debian.org>  Sat, 09 Aug 2025 10:47:38 +0200

libgcrypt20 (1.11.1-1) experimental; urgency=medium

  * New upstream release.
  * Update copyright info for new release.
  * 30_add_missing_file_from_GIT.diff: Add cipher/simd-common-riscv.h which
    was missing from the release tarball.
  * Update symbol file for release.

 -- Andreas Metzler <ametzler@debian.org>  Sun, 11 May 2025 14:32:14 +0200

libgcrypt20 (1.11.0+git20250114-1) experimental; urgency=medium

  * New upstream GIT snapshot from upstream LIBGCRYPT-1.11-BRANCH.
    + Drop superfluous patches.
    + Bump gcry_control() symbol dependency info.

 -- Andreas Metzler <ametzler@debian.org>  Sat, 15 Mar 2025 07:42:49 +0100

libgcrypt20 (1.11.0-7) unstable; urgency=medium

  [ Simon McVittie ]
  * Add an autopkgtest smoke-test for linking to libgcrypt.
    Superficial tests like this one are a surprisingly effective way to
    detect packaging regressions. Closes: #1088243

  [ Andreas Metzler ]
  * Sync with Ubuntu 1.11.0-6ubuntu1:
    Pull upstream patch to fix FTBFS on s390x during build-time tests:
    + lp2083245-disable-sha3-s390x-acceleration-for-cshake.patch
    (LP: #2083245)
  * Run wrap-and-sort -ast.

 -- Andreas Metzler <ametzler@debian.org>  Tue, 24 Dec 2024 13:35:47 +0100

libgcrypt20 (1.11.0-6) unstable; urgency=medium

  * 30_mpi-ec-inline-reduce-register-pressure-on-32-bit-ARM.patchn from
    upstream GIT master: Fix FTBFS on arm with gcc-14. Closes: #1077326

 -- Andreas Metzler <ametzler@debian.org>  Wed, 07 Aug 2024 18:42:37 +0200

libgcrypt20 (1.11.0-5) unstable; urgency=medium

  * Upload to unstable.

 -- Andreas Metzler <ametzler@debian.org>  Sun, 28 Jul 2024 13:05:45 +0200

libgcrypt20 (1.11.0-4) experimental; urgency=medium

  * Add missing Breaks/Replaces to libgcrypt-bin. Closes: #1076625

 -- Andreas Metzler <ametzler@debian.org>  Sat, 20 Jul 2024 11:31:22 +0200

libgcrypt20 (1.11.0-3) experimental; urgency=medium

  * Point watchfile to releases instead of snapshots again.
  * Move helper binaries from -dev package to newly added libgcrypt-bin
    package, mark libgcrypt20-dev Multi-Arch: same. Closes: #714589

 -- Andreas Metzler <ametzler@debian.org>  Fri, 19 Jul 2024 13:49:18 +0200

libgcrypt20 (1.11.0-2) unstable; urgency=low

  * Upload to unstable.

 -- Andreas Metzler <ametzler@debian.org>  Tue, 09 Jul 2024 16:29:33 +0200

libgcrypt20 (1.11.0-1) experimental; urgency=low

  * New upstream version.
    + Drop 30_add_missing_files_from_master.diff.
    + Update libgcrypt20.symbols to refer to release instead of beta version.

 -- Andreas Metzler <ametzler@debian.org>  Fri, 21 Jun 2024 18:08:24 +0200

libgcrypt20 (1.11.0~beta450-1) experimental; urgency=low

  * New upstream snapshot.
    + Drop 30_m4-Include-_AM_PATH_GPGRT_CONFIG-definition.patch.
    + Update symbol file. Add new functions. Bump version requirement
      on all symbols. (Many algorithms, enums extended, etc.)
    + 30_add_missing_files_from_master.diff: Add some files missing in tarball
      from upstream GIT master.
    + Update debian/copyright.
    + Version libgpg-error-dev build-dependency.
    + Drop debian/libgcrypt-config.1, libgcrypt-config is not shipped anymore.

 -- Andreas Metzler <ametzler@debian.org>  Sat, 25 May 2024 11:36:53 +0200

libgcrypt20 (1.10.3-3) unstable; urgency=medium

  * 30_m4-Include-_AM_PATH_GPGRT_CONFIG-definition.patch from upstream GIT
    master: Update libgcrypt.m4 to let AM_PATH_LIBGCRYPT continue to work
    without preceding AM_PATH_GPG_ERROR() when libgcrypt-config is removed.

 -- Andreas Metzler <ametzler@debian.org>  Tue, 14 May 2024 18:11:46 +0200

libgcrypt20 (1.10.3-2) unstable; urgency=medium

  * Upload to unstable.

 -- Andreas Metzler <ametzler@debian.org>  Fri, 01 Dec 2023 11:47:14 +0100

libgcrypt20 (1.10.3-1) experimental; urgency=medium

  * New upstream release.
    + Update symbol file.

 -- Andreas Metzler <ametzler@debian.org>  Thu, 30 Nov 2023 14:29:24 +0100

libgcrypt20 (1.10.2-3) unstable; urgency=medium

  [ Simon Josefsson ]
  * Update Homepage: URL.

  [ Andreas Metzler ]
  * Drop --insert-timestamp linker option on mingw*, binutils 2.41 should use
    SOURCE_DATE_EPOCH automatically and the Debian package has dropped the
    patch to add the --insert-timestamp option. Closes: #1052219

 -- Andreas Metzler <ametzler@debian.org>  Tue, 19 Sep 2023 13:48:32 +0200

libgcrypt20 (1.10.2-2) unstable; urgency=medium

  * Upload to unstable.

 -- Andreas Metzler <ametzler@debian.org>  Sun, 11 Jun 2023 11:21:04 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libgcrypt20-doc`.
