Ubuntu
libgcrypt20 package

  1. Bug #1700157
  2. Comment #2

Comment 2 for bug 1700157

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package libgcrypt20 - 1.7.8-1

---------------
libgcrypt20 (1.7.8-1) unstable; urgency=high

  * Fix 25_norevisionfromgit.diff to let ./configure generate a version-string
    without -beta suffix. LP: #1700157
  * New upstream version.
    + Mitigate a flush+reload side-channel attack on RSA secret keys dubbed
      "Sliding right into disaster". For details see
      <https://eprint.iacr.org/2017/627>. [CVE-2017-7526]

 -- Andreas Metzler <email address hidden> Thu, 29 Jun 2017 18:27:03 +0200