libgcrypt11 (1.5.4-2ubuntu2) vivid; urgency=medium
* SECURITY UPDATE: sidechannel attack on Elgamal
- debian/patches/CVE-2014-3591.patch: use ciphertext blinding in
cipher/elgamal.c.
- CVE-2014-3591
* SECURITY UPDATE: sidechannel attack via timing variations in mpi_powm
- debian/patches/CVE-2015-0837.patch: avoid timing variations in
mpi/mpi-pow.c, mpi/mpiutil.c, src/mpi.h.
- CVE-2015-0837
Date: Thu, 26 Mar 2015 08:16:10 -0400
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/+source/libgcrypt11/1.5.4-2ubuntu2
Format: 1.8
Date: Thu, 26 Mar 2015 08:16:10 -0400
Source: libgcrypt11
Binary: libgcrypt11-doc libgcrypt11-dev libgcrypt11-dbg libgcrypt11
libgcrypt11-udeb
Architecture: source
Version: 1.5.4-2ubuntu2
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Marc Deslauriers <[email protected]>
Description:
libgcrypt11 - LGPL Crypto library - runtime library
libgcrypt11-dbg - LGPL Crypto library - debugger files
libgcrypt11-dev - LGPL Crypto library - development files
libgcrypt11-doc - LGPL Crypto library - documentation
libgcrypt11-udeb - LGPL Crypto library - runtime library (udeb)
Changes:
libgcrypt11 (1.5.4-2ubuntu2) vivid; urgency=medium
.
* SECURITY UPDATE: sidechannel attack on Elgamal
- debian/patches/CVE-2014-3591.patch: use ciphertext blinding in
cipher/elgamal.c.
- CVE-2014-3591
* SECURITY UPDATE: sidechannel attack via timing variations in mpi_powm
- debian/patches/CVE-2015-0837.patch: avoid timing variations in
mpi/mpi-pow.c, mpi/mpiutil.c, src/mpi.h.
- CVE-2015-0837
Checksums-Sha1:
8f82cd95015dd95c9ba11161f88baf3c358f4191 2574 libgcrypt11_1.5.4-2ubuntu2.dsc
a80c6c03ce81831e83fe83b775d2a6f8efdb06f0 24980
libgcrypt11_1.5.4-2ubuntu2.debian.tar.xz
Checksums-Sha256:
615e73247e2bc5b2f145c5d6ebe590aacaba11d43ac1d2498d1ae8fd98fdce6e 2574
libgcrypt11_1.5.4-2ubuntu2.dsc
2b8d7090bc6061863a5743234eddfb27e54cbce6becfcd6f18a4b60b0d55c0e0 24980
libgcrypt11_1.5.4-2ubuntu2.debian.tar.xz
Files:
da37a2c72e237f755c1871646e0128be 2574 libs optional
libgcrypt11_1.5.4-2ubuntu2.dsc
ad238d23622164c4d6170e4dc59ef0b5 24980 libs optional
libgcrypt11_1.5.4-2ubuntu2.debian.tar.xz
Original-Maintainer: Debian GnuTLS Maintainers
<[email protected]>
--
Vivid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/vivid-changes
