Bug 40677 – libgcrypt11: Side channel attacks (4.0)

Bug 40677 - libgcrypt11: Side channel attacks (4.0)


Summary:	libgcrypt11: Side channel attacks (4.0)

Reported:	2016-02-16 19:00 CET by Arvid Requate
Modified:	2019-04-11 19:23 CEST (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Flags:	requate: Patch_Available+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2016-02-16 19:00:18 CET

Upstream Debian package version 1.5.0-5+deb7u4 fixes this issue:

* side-channel attack on ECDH with Weierstrass curves (CVE-2015-7511)

Comment 1 Arvid Requate

2016-06-01 19:10:49 CEST

UCS 4.0 is out of maintenance. See Depends field for the UCS 4.1 specific bug.