Summary: | <dev-libs/libgcrypt-1.8.1: Side channel attack on Curve25519 | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Kristian Fiskerstrand (RETIRED) <k_f> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | bertrand, crypto+disabled, k_f |
Priority: | Normal | Flags: | stable-bot:
sanity-check+
|
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=bf76acbf0da6b0f245e491bec12c0f0a1b5be7c9 | ||
Whiteboard: | A4 [noglsa cve] | ||
Package list: |
dev-libs/libgcrypt-1.8.1
|
Runtime testing required: | --- |
Bug Depends on: | |||
Bug Blocks: | 623006 |
Description
Kristian Fiskerstrand (RETIRED)
![]() commit 45abd63abc6644b6e177c057b5b42d894dbf8e29 (HEAD -> master, origin/master, origin/HEAD) Author: Kristian Fiskerstrand <k_f@gentoo.org> Date: Mon Aug 28 12:24:42 2017 +0200 dev-libs/libgcrypt: New upstream version 1.8.1 Package-Manager: Portage-2.3.6, Repoman-2.3.1 The paper is available at https://eprint.iacr.org/2017/806 alpha stable ppc stable ppc64 stable ia64 stable amd64/x86 stable arm stable hppa/sparc stable (thanks to Dakon) Last arches are done. @maintainer(s), please cleanup the vulnerable versions. (In reply to Aaron Bauman from comment #10) > @maintainer(s), please cleanup the vulnerable versions. GLSA Vote: No commit 1b01a3c4660b9ca76210427160fa1f1472d77f3f (HEAD -> master, origin/master, origin/HEAD) Author: Kristian Fiskerstrand <k_f@gentoo.org> Date: Sat Sep 9 02:39:35 2017 +0200 dev-libs/libgcrypt: cleanup old Package-Manager: Portage-2.3.6, Repoman-2.3.1 |