Format: 1.8
Date: Mon, 03 Jul 2017 08:00:00 -0400
Source: libgcrypt20
Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20 libgcrypt20-udeb libgcrypt11-dev libgcrypt-mingw-w64-dev
Architecture: s390x
Version: 1.7.6-1ubuntu0.1
Distribution: zesty
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@z13-015.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libgcrypt-mingw-w64-dev - LGPL Crypto library - Windows development
 libgcrypt11-dev - transitional libgcrypt11-dev package
 libgcrypt20 - LGPL Crypto library - runtime library
 libgcrypt20-dev - LGPL Crypto library - development files
 libgcrypt20-doc - LGPL Crypto library - documentation
 libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb)
Changes:
 libgcrypt20 (1.7.6-1ubuntu0.1) zesty-security; urgency=medium
 .
   * SECURITY UPDATE: full RSA key recovery via side-channel attack
     - debian/patches/CVE-2017-7526-1.patch: simplify loop in mpi/mpi-pow.c.
     - debian/patches/CVE-2017-7526-2.patch: use same computation for square
       and multiply in mpi/mpi-pow.c.
     - debian/patches/CVE-2017-7526-3.patch: add exponent blinding in
       cipher/rsa.c.
     - debian/patches/CVE-2017-7526-4.patch: add free to cipher/rsa.c.
     - debian/patches/CVE-2017-7526-5.patch: add free to cipher/rsa.c.
     - CVE-2017-7526
   * SECURITY UPDATE: EdDSA key recovery via side-channel attack
     - debian/patches/CVE-2017-9526-1.patch: store EdDSA session key in
       secure memory in cipher/ecc-eddsa.c.
     - debian/patches/CVE-2017-9526-2.patch: fix SEGV and stat calculation
       src/secmem.c.
     - CVE-2017-9526
Checksums-Sha1:
 e9893acdad5fc13b24a8fcd724f80c5cb37b8ce5 6662 libgcrypt11-dev_1.5.4-3+really1.7.6-1ubuntu0.1_s390x.deb
 eb64148edc6301c4727c7ffe33901dee93a4f461 574092 libgcrypt20-dbgsym_1.7.6-1ubuntu0.1_s390x.ddeb
 d0657f117fef8ab5d352e4fe6bfb9105ab265ace 28028 libgcrypt20-dev-dbgsym_1.7.6-1ubuntu0.1_s390x.ddeb
 6c9491babc8f5adc790973f3e92fe01d4df04d72 388002 libgcrypt20-dev_1.7.6-1ubuntu0.1_s390x.deb
 ee5aa1843f93fc263402f4cc101149ac036ebd74 574054 libgcrypt20-udeb-dbgsym_1.7.6-1ubuntu0.1_s390x.ddeb
 0756352e651e6d4b14c84e323f25d8581554b725 306404 libgcrypt20-udeb_1.7.6-1ubuntu0.1_s390x.udeb
 5a58e268bd147aa57b5e0a0b6d10f8b02e825397 337536 libgcrypt20_1.7.6-1ubuntu0.1_s390x.deb
Checksums-Sha256:
 e1d1a5b4fe25e7096af51ca558e3fa6b1272909c0b183bd41d994ce0a8313c80 6662 libgcrypt11-dev_1.5.4-3+really1.7.6-1ubuntu0.1_s390x.deb
 27d1e6f1233ed25f737963b45c2403c0e817d0b5e3f2efe69d492727e59f2d15 574092 libgcrypt20-dbgsym_1.7.6-1ubuntu0.1_s390x.ddeb
 908892d280850b02f70c1892d35e9f932c1eecfc6a809bfbf7d5e1b9095edb55 28028 libgcrypt20-dev-dbgsym_1.7.6-1ubuntu0.1_s390x.ddeb
 3a908f3cf7ce9c8744838d7485955565ce0f028c120250c507434f4544a368e4 388002 libgcrypt20-dev_1.7.6-1ubuntu0.1_s390x.deb
 ad5697ade5dc5ea8bd7262528a9c7a0b023bdbee1da50fffa85df46851b9f21f 574054 libgcrypt20-udeb-dbgsym_1.7.6-1ubuntu0.1_s390x.ddeb
 5109e264a0ac54c7cbd4fe606ad52224d1d2161d376290ae8a5c6ba8c6795274 306404 libgcrypt20-udeb_1.7.6-1ubuntu0.1_s390x.udeb
 584b5b0cedfc8458b2aa9b89fe09b0321d8b0a0adb7fb1423b856b7f19052a9b 337536 libgcrypt20_1.7.6-1ubuntu0.1_s390x.deb
Files:
 baeea4212e97f8fcafb468e37891d068 6662 oldlibs extra libgcrypt11-dev_1.5.4-3+really1.7.6-1ubuntu0.1_s390x.deb
 6ef118a917ebfc786e94103ed5b6e033 574092 libs extra libgcrypt20-dbgsym_1.7.6-1ubuntu0.1_s390x.ddeb
 5bdfd7039afde975a134ddf75e38569f 28028 libdevel extra libgcrypt20-dev-dbgsym_1.7.6-1ubuntu0.1_s390x.ddeb
 a9cab5b38dc30d67ecdeddf022cbd725 388002 libdevel optional libgcrypt20-dev_1.7.6-1ubuntu0.1_s390x.deb
 841a9907bb000b48b512dc5b30d61012 574054 debian-installer extra libgcrypt20-udeb-dbgsym_1.7.6-1ubuntu0.1_s390x.ddeb
 4abab6f07c7c2df3d0bb22b30f7b12ed 306404 debian-installer optional libgcrypt20-udeb_1.7.6-1ubuntu0.1_s390x.udeb
 3780afabdafaea4f5341d3eb4ffe97bc 337536 libs standard libgcrypt20_1.7.6-1ubuntu0.1_s390x.deb
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>