Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 575672 - =dev-libs/libgcrypt-1.5.5 please stabilize
Summary: =dev-libs/libgcrypt-1.5.5 please stabilize
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2014-3591
  Show dependency tree
 
Reported: 2016-02-25 17:45 UTC by Kristian Fiskerstrand (RETIRED)
Modified: 2016-05-22 19:31 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Kristian Fiskerstrand (RETIRED) gentoo-dev 2016-02-25 17:45:45 UTC 
This relates to the security bug tracked in bug 541564. 

Arches, please stabilize:
=dev-libs/libgcrypt-1.5.5
Stable targets: alpha amd64 arm hppa ia64 ppc ppc64 sparc x86 

Removal of 1.5 branch before EOL later this year is tracked in bug 567382,
but while it is in support period and apps depend explicitly on it blocking
upgrade path to 1.6 I suggest stabilization on all arches.

commit 7483dce1f1ea850bcb739d19a05cede84b9b2a33
Author: Kristian Fiskerstrand <k_f@gentoo.org>
Date:   Thu Feb 25 18:46:27 2016 +0100

    dev-libs/libgcrypt: Version bump of 0/11 to 1.5.5
    
    This is a security fix release for
      * Mitigate chosen cipher text attacks on ECDH with
        Weierstrass curves.  [CVE-2015-7511] (already backported
        to 1.5.4-r2)
    
      * Use ciphertext blinding for Elgamal decryption.
        [CVE-2014-3591]
    
    the libgcrypt 1.5 branch is EOL for security fixes YE2016
    
    Gentoo-Bug: 541564
    
    Package-Manager: portage-2.2.27
Comment 1 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2016-03-05 16:48:08 UTC 
amd64 stable
Comment 2 Agostino Sarubbo gentoo-dev 2016-03-15 15:34:23 UTC 
x86 stable
Comment 3 Agostino Sarubbo gentoo-dev 2016-03-16 12:00:00 UTC 
ppc stable
Comment 4 Agostino Sarubbo gentoo-dev 2016-03-17 10:52:58 UTC 
ppc64 stable
Comment 5 Agostino Sarubbo gentoo-dev 2016-03-19 11:43:10 UTC 
sparc stable
Comment 6 Agostino Sarubbo gentoo-dev 2016-03-20 11:55:29 UTC 
ia64 stable
Comment 7 Markus Meier gentoo-dev 2016-03-25 09:41:04 UTC 
arm stable
Comment 8 Tobias Klausmann (RETIRED) gentoo-dev 2016-04-23 17:38:09 UTC 
Stable on alpha.
Comment 9 Jeroen Roovers (RETIRED) gentoo-dev 2016-05-22 18:59:46 UTC 
Stable for HPPA.