Accepted libgcrypt11 1.4.5-2+squeeze1 (source all i386)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Format: 1.8
Date: Sat, 27 Jul 2013 13:42:31 +0200
Source: libgcrypt11
Binary: libgcrypt11-doc libgcrypt11-dev libgcrypt11-dbg libgcrypt11
Architecture: source all i386
Version: 1.4.5-2+squeeze1
Distribution: squeeze-security
Urgency: high
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
libgcrypt11 - LGPL Crypto library - runtime library
libgcrypt11-dbg - LGPL Crypto library - debugger files
libgcrypt11-dev - LGPL Crypto library - development files
libgcrypt11-doc - LGPL Crypto library - documentation
Changes:
libgcrypt11 (1.4.5-2+squeeze1) squeeze-security; urgency=high
.
* Pull and unfuzzz code changes from 1.5.3 security fix release from
upstream GIT:
+ [35_bug-in-mpi_powm-for-e-0.patch] mpi/mpi-pow.c (gcry_mpi_powm) - For
a zero exponent, make sure that the result has been allocated.
+ [36_Mitigate-flush-reload-cache-attack-on-RSA.patch] Mitigate a
flush+reload cache attack on RSA secret exponents.
<http://eprint.iacr.org/2013/448>
This fixes CVE-2013-4242.
Checksums-Sha1:
7580ed55ec9940663dcdfe83a8df7933ee80d61e 1621 libgcrypt11_1.4.5-2+squeeze1.dsc
8d83a60ca55f2ea40b5d5bc99463905b7a1dcb56 1419443 libgcrypt11_1.4.5.orig.tar.gz
87507dc18a9702d9d548939b10a8c595790c84b4 14831 libgcrypt11_1.4.5-2+squeeze1.debian.tar.gz
adf6e51d9de0c3a1181056567e2573d866b97859 673248 libgcrypt11-doc_1.4.5-2+squeeze1_all.deb
85069cffb0fd477bde910f378df0d2324d22fbf5 362718 libgcrypt11-dev_1.4.5-2+squeeze1_i386.deb
81308154ddcc800733c7aba1658879ee99279a90 362802 libgcrypt11-dbg_1.4.5-2+squeeze1_i386.deb
f5cb06d23745fd1ceec23deb60a9081cf2ebf828 266680 libgcrypt11_1.4.5-2+squeeze1_i386.deb
Checksums-Sha256:
0cabaf7be5011705e0fc3d26893ae16aef22e21785114d9c274219eb310f3d38 1621 libgcrypt11_1.4.5-2+squeeze1.dsc
01652928917ad47e91ab8e0c150d62e0ef288f13b77842367c832109c3af788f 1419443 libgcrypt11_1.4.5.orig.tar.gz
6256e21e9ce18ba37d626cd3a47961ef900f2cbb8a264132820502e1181ab0e3 14831 libgcrypt11_1.4.5-2+squeeze1.debian.tar.gz
82ce2b98e3aaef2d76aaa2058a0c826005c484e08e2d65d30cfa6dab345655d9 673248 libgcrypt11-doc_1.4.5-2+squeeze1_all.deb
05f154e8da3975460dcfe7b389b8dec7b67f446fde3978601f51d175e21d8422 362718 libgcrypt11-dev_1.4.5-2+squeeze1_i386.deb
4d177d2ef67bc04ca9e803fa9d02329311c121f131a20db43b4e99d4792ce4d0 362802 libgcrypt11-dbg_1.4.5-2+squeeze1_i386.deb
0dac3fc3e29e14044296b2917eac0b2dc2c4d4b5c9a586b9b6991b7e16854958 266680 libgcrypt11_1.4.5-2+squeeze1_i386.deb
Files:
910cdc15183932eb304659a0b0cf4b53 1621 libs optional libgcrypt11_1.4.5-2+squeeze1.dsc
325294c12e7b99d82dee3a8bf8c2c28e 1419443 libs optional libgcrypt11_1.4.5.orig.tar.gz
95bba6c23888cf1a5efb338e11f03394 14831 libs optional libgcrypt11_1.4.5-2+squeeze1.debian.tar.gz
c858b4cda7687d2f448ceaf3dc8528a6 673248 doc optional libgcrypt11-doc_1.4.5-2+squeeze1_all.deb
4a105e1ab8fd25e7a8edb3eccac6e743 362718 libdevel optional libgcrypt11-dev_1.4.5-2+squeeze1_i386.deb
0be84951fbf1f234458a2f8410fb77fa 362802 debug extra libgcrypt11-dbg_1.4.5-2+squeeze1_i386.deb
a7a5ec2992392feaf8e05a517ed71215 266680 libs standard libgcrypt11_1.4.5-2+squeeze1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEAREDAAYFAlHztEIACgkQHTOcZYuNdmOwIQCfXwvZatlvIv5WL1I2xvClbl3q
aqEAn1qeJ3xywPKo9MjA4twah/g1alVm
=ob7G
-----END PGP SIGNATURE-----