libgcrypt20 (1.9.4-3ubuntu3.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflow via crafted ECDH ciphertext
    - debian/patches/CVE-2026-41989.patch: cipher:ecc: Fix decoding a point on
      Montgomery curve. in cipher/ecc-misc.c.
    - CVE-2026-41989
  * This package does _not_ contain the changes from 1.9.4-3ubuntu3.1 in
    jammy-proposed.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 12 May 2026 14:17:54 +0200

libgcrypt20 (1.9.4-3ubuntu3) jammy; urgency=high

  * No change rebuild for ppc64el baseline bump.

 -- Julian Andres Klode <juliank@ubuntu.com>  Thu, 24 Mar 2022 13:12:17 +0100

libgcrypt20 (1.9.4-3ubuntu2) jammy; urgency=medium

  * Cherry-pick upstream patch to fix FTBFS on armhf.

 -- Dimitri John Ledkov <dimitri.ledkov@canonical.com>  Mon, 01 Nov 2021 16:25:14 +0000

libgcrypt20 (1.9.4-3ubuntu1) jammy; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - Disable the library reading /proc/sys/crypto/fips_enabled file
      and going into FIPS mode. libgcrypt is not a FIPS certified library.
      (LP 1748310)
  * Drop CVE and CET patches, applied in Debian or upstreamed.
  * Cherry-pick one more patch from master to correctly enable assembly
    CET.

 -- Dimitri John Ledkov <dimitri.ledkov@canonical.com>  Mon, 01 Nov 2021 14:26:05 +0000

libgcrypt20 (1.9.4-3) unstable; urgency=medium

  * Fix libgcrypt-config wrapper to use 'command -v' instead of 'which'.
    (Thanks, Emmanuel Bouthenot)
    Closes: #993244

 -- Andreas Metzler <ametzler@debian.org>  Sat, 11 Sep 2021 13:43:26 +0200

libgcrypt20 (1.9.4-2) unstable; urgency=medium

  * Upload to unstable.

 -- Andreas Metzler <ametzler@debian.org>  Sat, 04 Sep 2021 07:29:03 +0200

libgcrypt20 (1.9.4-1) experimental; urgency=medium

  * New upstream release. (Also includes fix for Elgamal encryption for
    other implementations. CVE-2021-33560)

 -- Andreas Metzler <ametzler@debian.org>  Sun, 29 Aug 2021 19:17:04 +0200

libgcrypt20 (1.9.3-1) experimental; urgency=medium

  * New upstream release.

 -- Andreas Metzler <ametzler@debian.org>  Wed, 21 Apr 2021 18:22:56 +0200

libgcrypt20 (1.9.2-1) experimental; urgency=low

  * New upstream release.

 -- Andreas Metzler <ametzler@debian.org>  Thu, 18 Feb 2021 18:00:38 +0100

libgcrypt20 (1.9.2~beta16-1) experimental; urgency=low

  * Simplify ./configure for Windows build, do not disable optimization and
    assembly, set timestamp=$(SOURCE_DATE_EPOCH) instead of disabling the
    timestamp.
  * New upstream release.
    + Drop 30_Revert-Define-HW-feature-flags-per-architecture.patch.

 -- Andreas Metzler <ametzler@debian.org>  Sat, 13 Feb 2021 08:08:19 +0100

# For older changelog entries, run 'apt-get changelog libgcrypt20-doc'
