Format: 1.8
Date: Mon, 03 Jul 2017 08:15:20 -0400
Source: libgcrypt20
Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20 libgcrypt20-udeb libgcrypt11-dev libgcrypt-mingw-w64-dev
Architecture: powerpc
Version: 1.7.2-2ubuntu1.1
Distribution: yakkety
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@denneed05.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libgcrypt-mingw-w64-dev - LGPL Crypto library - Windows development
 libgcrypt11-dev - transitional libgcrypt11-dev package
 libgcrypt20 - LGPL Crypto library - runtime library
 libgcrypt20-dev - LGPL Crypto library - development files
 libgcrypt20-doc - LGPL Crypto library - documentation
 libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb)
Changes:
 libgcrypt20 (1.7.2-2ubuntu1.1) yakkety-security; urgency=medium
 .
   * SECURITY UPDATE: full RSA key recovery via side-channel attack
     - debian/patches/CVE-2017-7526-1.patch: simplify loop in mpi/mpi-pow.c.
     - debian/patches/CVE-2017-7526-2.patch: use same computation for square
       and multiply in mpi/mpi-pow.c.
     - debian/patches/CVE-2017-7526-3.patch: add exponent blinding in
       cipher/rsa.c.
     - debian/patches/CVE-2017-7526-4.patch: add free to cipher/rsa.c.
     - debian/patches/CVE-2017-7526-5.patch: add free to cipher/rsa.c.
     - CVE-2017-7526
   * SECURITY UPDATE: EdDSA key recovery via side-channel attack
     - debian/patches/CVE-2017-9526-1.patch: store EdDSA session key in
       secure memory in cipher/ecc-eddsa.c.
     - debian/patches/CVE-2017-9526-2.patch: fix SEGV and stat calculation
       src/secmem.c.
     - CVE-2017-9526
Checksums-Sha1:
 5c2fac99c4dc163f41091a75ea616db9fcf043b5 578210 libgcrypt20-dbgsym_1.7.2-2ubuntu1.1_powerpc.ddeb
 527b04572b5dbbc01209f14a259aedc2244ee6e8 27630 libgcrypt20-dev-dbgsym_1.7.2-2ubuntu1.1_powerpc.ddeb
 875ca1ac12cd6a9d22d8de5c2c08ba2fa5d1c96a 382010 libgcrypt20-dev_1.7.2-2ubuntu1.1_powerpc.deb
 5844140e539d1562a713e81f61b7451eec18bd78 578168 libgcrypt20-udeb-dbgsym_1.7.2-2ubuntu1.1_powerpc.ddeb
 e8f59a92dff7bd04e199e0895ddfee7fde805048 309528 libgcrypt20-udeb_1.7.2-2ubuntu1.1_powerpc.udeb
 3edfc1444e4906a9d1094db77f7b8c33271595ec 339212 libgcrypt20_1.7.2-2ubuntu1.1_powerpc.deb
Checksums-Sha256:
 df2542ba556e7d439707d33bccd24cdbf5a8efddfe940d47374158cd24c8a50d 578210 libgcrypt20-dbgsym_1.7.2-2ubuntu1.1_powerpc.ddeb
 be16ad8cb36f20c7516ee78d4a11b531bec9562319d670b7d26441ea425f7310 27630 libgcrypt20-dev-dbgsym_1.7.2-2ubuntu1.1_powerpc.ddeb
 18a217b7c8fa30d8f6bef8b12aa7aa4659d7b7466b4a222841c76a44297338bb 382010 libgcrypt20-dev_1.7.2-2ubuntu1.1_powerpc.deb
 964b593f0843e060f831e04ad8d99c6cecc6ada7dd1cf2d908e1760e7c589164 578168 libgcrypt20-udeb-dbgsym_1.7.2-2ubuntu1.1_powerpc.ddeb
 99723ef81b73e773d51ded218cdcc4402ffa1cdd8b73cea478217cc8bba3dc5b 309528 libgcrypt20-udeb_1.7.2-2ubuntu1.1_powerpc.udeb
 a92bc2e0897ed233b252a00d60a276030ad06e92f37fa25a5d6ef29cfa33b1ca 339212 libgcrypt20_1.7.2-2ubuntu1.1_powerpc.deb
Files:
 7ed81422539b5db9438dce0a531d80a6 578210 libs extra libgcrypt20-dbgsym_1.7.2-2ubuntu1.1_powerpc.ddeb
 ec336d891de22c3281224323d1131c20 27630 libdevel extra libgcrypt20-dev-dbgsym_1.7.2-2ubuntu1.1_powerpc.ddeb
 816eac17986af0c69c170c20230d53bb 382010 libdevel optional libgcrypt20-dev_1.7.2-2ubuntu1.1_powerpc.deb
 4359501eedb35bbb068e9b8cf8635055 578168 debian-installer extra libgcrypt20-udeb-dbgsym_1.7.2-2ubuntu1.1_powerpc.ddeb
 b86e885c359edd7a682164d5867ac08d 309528 debian-installer optional libgcrypt20-udeb_1.7.2-2ubuntu1.1_powerpc.udeb
 f5e1b237b31a1655858fef29e651689e 339212 libs standard libgcrypt20_1.7.2-2ubuntu1.1_powerpc.deb
Original-Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>