Format: 1.8 Date: Thu, 26 Mar 2015 07:25:12 -0400 Source: libgcrypt20 Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20-dbg libgcrypt20 Architecture: ppc64el Version: 1.6.1-2ubuntu1.14.04.1 Distribution: trusty Urgency: medium Maintainer: Ubuntu Build Daemon Changed-By: Marc Deslauriers Description: libgcrypt20 - LGPL Crypto library - runtime library libgcrypt20-dbg - LGPL Crypto library - debugger files libgcrypt20-dev - LGPL Crypto library - development files libgcrypt20-doc - LGPL Crypto library - documentation Changes: libgcrypt20 (1.6.1-2ubuntu1.14.04.1) trusty-security; urgency=medium . * SECURITY UPDATE: sidechannel attack on Elgamal - debian/patches/CVE-2014-3591.patch: use ciphertext blinding in cipher/elgamal.c. - CVE-2014-3591 * SECURITY UPDATE: sidechannel attack via timing variations in mpi_powm - debian/patches/CVE-2015-0837.patch: avoid timing variations in mpi/mpi-pow.c, mpi/mpiutil.c, src/mpi.h. - CVE-2015-0837 Checksums-Sha1: 85eef48ecc9e58c61704748e3740e12bc197c61f 341498 libgcrypt20-dev_1.6.1-2ubuntu1.14.04.1_ppc64el.deb 5a3f5bca377eab32ec61a1591f6311033567d192 678544 libgcrypt20-dbg_1.6.1-2ubuntu1.14.04.1_ppc64el.deb 3275076d4379cafecbf5fe21e85830a7e21e5cff 290388 libgcrypt20_1.6.1-2ubuntu1.14.04.1_ppc64el.deb Checksums-Sha256: 356e9ab6b90af48b4794f1314a13ca0e79d9eac371539fed4e064dc387b928b0 341498 libgcrypt20-dev_1.6.1-2ubuntu1.14.04.1_ppc64el.deb c0a5cfab208ad8af3224330cda8356ec5fdab992c1dd8af99e20301b7795a07b 678544 libgcrypt20-dbg_1.6.1-2ubuntu1.14.04.1_ppc64el.deb 916059ddad39d1faac7b975fce53891af9668621193205ae1aca6c8a444e0532 290388 libgcrypt20_1.6.1-2ubuntu1.14.04.1_ppc64el.deb Files: 5dadf57934c62f09e9301e31d3f2cd62 341498 libdevel optional libgcrypt20-dev_1.6.1-2ubuntu1.14.04.1_ppc64el.deb b355806b03d63767183a7741ecb0a478 678544 debug extra libgcrypt20-dbg_1.6.1-2ubuntu1.14.04.1_ppc64el.deb 3a823e10b7358de8378d413b9306de6d 290388 libs standard libgcrypt20_1.6.1-2ubuntu1.14.04.1_ppc64el.deb Original-Maintainer: Debian GnuTLS Maintainers