Format: 1.8 Date: Tue, 30 Jul 2013 14:54:59 -0700 Source: gnupg Binary: gnupg gnupg-curl gpgv gnupg-udeb gpgv-udeb Architecture: armhf armhf_translations Version: 1.4.12-7ubuntu1.1 Distribution: raring Urgency: low Maintainer: Ubuntu/armhf Build Daemon Changed-By: Seth Arnold Description: gnupg - GNU privacy guard - a free PGP replacement gnupg-curl - GNU privacy guard - a free PGP replacement (cURL) gnupg-udeb - GNU privacy guard - a free PGP replacement (udeb) gpgv - GNU privacy guard - signature verification tool gpgv-udeb - minimal signature verification tool (udeb) Changes: gnupg (1.4.12-7ubuntu1.1) raring-security; urgency=low . * SECURITY UPDATE: The path of execution in an exponentiation function may depend upon secret key data, allowing a local attacker to determine the contents of the secret key through a side-channel attack. - debian/patches/CVE-2013-4242.diff: always perform the mpi_mul for exponents in secure memory. Based on upstream patch. - CVE-2013-4242 Checksums-Sha1: 00ac0f916f73c46e7229bfd302403f17a627d7dc 721020 gnupg_1.4.12-7ubuntu1.1_armhf.deb 2a447573ca0bc201888dc97ef1265d81a7c7c817 17660 gnupg-curl_1.4.12-7ubuntu1.1_armhf.deb 71f6983d2a07a2a752785f4d1fb5f9c15fa09306 150068 gpgv_1.4.12-7ubuntu1.1_armhf.deb 011f8d1f1b3080480cfe38ad486c0f1f451f4938 312474 gnupg-udeb_1.4.12-7ubuntu1.1_armhf.udeb 3ed7f4c46127bc7a11ad3b533cf9b2590c0746a2 110464 gpgv-udeb_1.4.12-7ubuntu1.1_armhf.udeb fbfb1b2da27be3098a76963da1a6c281472a1099 2555665 gnupg_1.4.12-7ubuntu1.1_armhf_translations.tar.gz Checksums-Sha256: 3bd64920409b8b2f591b3a6084cdabbee1d73b9586e322476641c1ceb9033006 721020 gnupg_1.4.12-7ubuntu1.1_armhf.deb e187996b82142ffff4aa68a4a9b1daba662a0c90bef6fad1aa33225de13f8ee6 17660 gnupg-curl_1.4.12-7ubuntu1.1_armhf.deb 55329e85d39fd96c54581ff084fc2210afc8c21dd36edd805ca146c3cc461c73 150068 gpgv_1.4.12-7ubuntu1.1_armhf.deb 09d5c289728090867cd96e1bc48ecc36c48c642c1b1bd6dbed839c4795dad292 312474 gnupg-udeb_1.4.12-7ubuntu1.1_armhf.udeb 5453596c718a9061ff330b986794d229dacfe44a792be6099da2c99fb92375f2 110464 gpgv-udeb_1.4.12-7ubuntu1.1_armhf.udeb fab715da63880552f354e87a798c2af9224816e3b4c28660e623df03e8a9006a 2555665 gnupg_1.4.12-7ubuntu1.1_armhf_translations.tar.gz Files: af96d3c1a8591a8f3f410730cdf18090 721020 utils important gnupg_1.4.12-7ubuntu1.1_armhf.deb c01a2b7082fe088747b07815a8df11da 17660 utils optional gnupg-curl_1.4.12-7ubuntu1.1_armhf.deb 50ddc9b880f83f62a44ae279bbdef36e 150068 utils important gpgv_1.4.12-7ubuntu1.1_armhf.deb 31ed3cfcae832ede9dda15382e5b0d2f 312474 debian-installer extra gnupg-udeb_1.4.12-7ubuntu1.1_armhf.udeb a0493315e8c34754761d46a5e327afda 110464 debian-installer extra gpgv-udeb_1.4.12-7ubuntu1.1_armhf.udeb 39a4bc0111456f630e0228765026ca64 2555665 raw-translations - gnupg_1.4.12-7ubuntu1.1_armhf_translations.tar.gz Original-Maintainer: Debian GnuPG-Maintainers