Format: 1.8
Date: Thu, 28 Nov 2019 13:53:23 -0500
Source: libgcrypt20
Binary: libgcrypt11-dev libgcrypt20 libgcrypt20-dev libgcrypt20-udeb
Architecture: i386
Version: 1.8.4-3ubuntu1.1
Distribution: disco
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-024.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libgcrypt11-dev - transitional libgcrypt11-dev package
 libgcrypt20 - LGPL Crypto library - runtime library
 libgcrypt20-dev - LGPL Crypto library - development files
 libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb)
Changes:
 libgcrypt20 (1.8.4-3ubuntu1.1) disco-security; urgency=medium
 .
   * SECURITY UPDATE: ECDSA timing attack
     - debian/patches/CVE-2019-13627-1.patch: add mitigation against timing
       attack in cipher/ecc-ecdsa.c, mpi/ec.c.
     - debian/patches/CVE-2019-13627-2.patch: fix use of nonce, use larger
       one in cipher/dsa-common.c, cipher/dsa.c, cipher/ecc-ecdsa.c,
       cipher/ecc-gost.c, cipher/pubkey-internal.h.
     - CVE-2019-13627
Checksums-Sha1:
 0703500b59adf4c9691a59dcce74ac83376b3e4d 8952 libgcrypt11-dev_1.5.4-3+really1.8.4-3ubuntu1.1_i386.deb
 9a53692920eb076161de3301132caed046d96c68 1121344 libgcrypt20-dbgsym_1.8.4-3ubuntu1.1_i386.ddeb
 b6f23e4b7143bd6440d0de9af381753a3eade7d0 37976 libgcrypt20-dev-dbgsym_1.8.4-3ubuntu1.1_i386.ddeb
 8a9727035afa01378116b4e278b53a007a890828 457232 libgcrypt20-dev_1.8.4-3ubuntu1.1_i386.deb
 4165a7c8773dfb5a59e33b4683038e1f61f8a661 368036 libgcrypt20-udeb_1.8.4-3ubuntu1.1_i386.udeb
 304b45f3a6df095d9162baccf5d363a588562983 6443 libgcrypt20_1.8.4-3ubuntu1.1_i386.buildinfo
 2ae5b0bd284920249dd5f3891268d100fce5d35a 402104 libgcrypt20_1.8.4-3ubuntu1.1_i386.deb
Checksums-Sha256:
 1d1a14843d7514298c479e0382ef65433d461be821e39640c960b4b2cf4ad2f5 8952 libgcrypt11-dev_1.5.4-3+really1.8.4-3ubuntu1.1_i386.deb
 1508d0e00f4bcc4008ba7798669e7adf75537b423b585bba8041fa8a937d2852 1121344 libgcrypt20-dbgsym_1.8.4-3ubuntu1.1_i386.ddeb
 d6a506a81049eaaf01734aba905fbcdf84a339de692171677b8ba26dcbf8264d 37976 libgcrypt20-dev-dbgsym_1.8.4-3ubuntu1.1_i386.ddeb
 341eb9e8c64c589ae3015b2f1276bf295001f2991d905969432c31fb83505e58 457232 libgcrypt20-dev_1.8.4-3ubuntu1.1_i386.deb
 d6d26e6a382292b7fddaa6bf991a0c8b6b1d430781ef80906f24a9ab007c6fd2 368036 libgcrypt20-udeb_1.8.4-3ubuntu1.1_i386.udeb
 f837b13b5d323ee228a2ecb1342ee1c3cf2da4752a4be93f58c4756adf4ae7b0 6443 libgcrypt20_1.8.4-3ubuntu1.1_i386.buildinfo
 583b7208cc54a6651da0db69a271f10e03092580ad3e20c42ea57aee98fac890 402104 libgcrypt20_1.8.4-3ubuntu1.1_i386.deb
Files:
 2635a1895c65923f08f787af813c9b6e 8952 oldlibs optional libgcrypt11-dev_1.5.4-3+really1.8.4-3ubuntu1.1_i386.deb
 ebb41f622ee64b8801b6bd6d5b414c89 1121344 debug optional libgcrypt20-dbgsym_1.8.4-3ubuntu1.1_i386.ddeb
 047a63f2ee728367d8ce2f616db8ad51 37976 debug optional libgcrypt20-dev-dbgsym_1.8.4-3ubuntu1.1_i386.ddeb
 66afc9b695f56e66d7ecd4d835c920ae 457232 libdevel optional libgcrypt20-dev_1.8.4-3ubuntu1.1_i386.deb
 a3d1177b1857ecb2b6f96d5cc8523972 368036 debian-installer optional libgcrypt20-udeb_1.8.4-3ubuntu1.1_i386.udeb
 3aff435e850c49c2f1cff5deac5c62d9 6443 libs optional libgcrypt20_1.8.4-3ubuntu1.1_i386.buildinfo
 07aa58d781c841832ba250eac5d514b7 402104 libs optional libgcrypt20_1.8.4-3ubuntu1.1_i386.deb
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>