Format: 1.8 Date: Mon, 03 Jul 2017 08:16:37 -0400 Source: libgcrypt20 Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20 libgcrypt20-udeb libgcrypt11-dev Architecture: powerpc Version: 1.6.5-2ubuntu0.3 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libgcrypt11-dev - transitional libgcrypt11-dev package libgcrypt20 - LGPL Crypto library - runtime library libgcrypt20-dev - LGPL Crypto library - development files libgcrypt20-doc - LGPL Crypto library - documentation libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb) Changes: libgcrypt20 (1.6.5-2ubuntu0.3) xenial-security; urgency=medium . * SECURITY UPDATE: full RSA key recovery via side-channel attack - debian/patches/CVE-2017-7526-1.patch: simplify loop in mpi/mpi-pow.c. - debian/patches/CVE-2017-7526-2.patch: use same computation for square and multiply in mpi/mpi-pow.c. - debian/patches/CVE-2017-7526-3.patch: add exponent blinding in cipher/rsa.c. - debian/patches/CVE-2017-7526-4.patch: add free to cipher/rsa.c. - debian/patches/CVE-2017-7526-5.patch: add free to cipher/rsa.c. - CVE-2017-7526 * SECURITY UPDATE: EdDSA key recovery via side-channel attack - debian/patches/CVE-2017-9526-1.patch: store EdDSA session key in secure memory in cipher/ecc-eddsa.c. - debian/patches/CVE-2017-9526-2.patch: fix SEGV and stat calculation src/secmem.c. - CVE-2017-9526 Checksums-Sha1: 1bb5808cd26656f59d6187555b2949fd27ada59a 450376 libgcrypt20-dbgsym_1.6.5-2ubuntu0.3_powerpc.ddeb 29bf1dd6661d8f94c23d07c29f4d287a3dcdd7e9 26776 libgcrypt20-dev-dbgsym_1.6.5-2ubuntu0.3_powerpc.ddeb 7776638aad282cb24042cf9a2b6fabf5e03de261 343990 libgcrypt20-dev_1.6.5-2ubuntu0.3_powerpc.deb 6a8f42d12381ee451dd82de21ff6a5a3d391011e 450518 libgcrypt20-udeb-dbgsym_1.6.5-2ubuntu0.3_powerpc.ddeb f8e6f8992bf21a1758642a5c71f56016a2d642a9 274946 libgcrypt20-udeb_1.6.5-2ubuntu0.3_powerpc.udeb 1d93a1341264625c2bf401cd5e3db97967ac8cae 304562 libgcrypt20_1.6.5-2ubuntu0.3_powerpc.deb Checksums-Sha256: 4aa09fe752aa3249de6bad042cd2a04ed253ee040126b8d8c7b32097772c8dda 450376 libgcrypt20-dbgsym_1.6.5-2ubuntu0.3_powerpc.ddeb 576115ad6d63693d26409b283c2df67ba3a0f0a3015d35112f4f4ff60836beb6 26776 libgcrypt20-dev-dbgsym_1.6.5-2ubuntu0.3_powerpc.ddeb 758c26071947efcb116a97765be02e2b0e25d22c5245fc8c95376a02d1c1ae19 343990 libgcrypt20-dev_1.6.5-2ubuntu0.3_powerpc.deb 847d644eed3b3c8417ec36f22fc9422e44f187f32f507a55c3568ad9891e2c2d 450518 libgcrypt20-udeb-dbgsym_1.6.5-2ubuntu0.3_powerpc.ddeb 240a5584927d4f41f1714e48a2a734dbc17008a02981ec9467f30075516a6cec 274946 libgcrypt20-udeb_1.6.5-2ubuntu0.3_powerpc.udeb 31dad002170d4ea176526914c9f55e4b853baecebf7dbbf705b16f6438e904fb 304562 libgcrypt20_1.6.5-2ubuntu0.3_powerpc.deb Files: 3c34458a4a07315ddaf5876b9257af30 450376 libs extra libgcrypt20-dbgsym_1.6.5-2ubuntu0.3_powerpc.ddeb 1d03187f20abba4f1a7cb360d9809d99 26776 libdevel extra libgcrypt20-dev-dbgsym_1.6.5-2ubuntu0.3_powerpc.ddeb ade438d95a803426095543edd181d049 343990 libdevel optional libgcrypt20-dev_1.6.5-2ubuntu0.3_powerpc.deb 483279c56547ab6f83fb9bd012ed650c 450518 debian-installer extra libgcrypt20-udeb-dbgsym_1.6.5-2ubuntu0.3_powerpc.ddeb ce2e7cf81f2e291044404536f16408be 274946 debian-installer optional libgcrypt20-udeb_1.6.5-2ubuntu0.3_powerpc.udeb f9dea0e49187caa77f436edb5652d442 304562 libs standard libgcrypt20_1.6.5-2ubuntu0.3_powerpc.deb Original-Maintainer: Debian GnuTLS Maintainers