-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2015-03-26 08:55:36 UTC
-
Revision ID:
package-import@ubuntu.com-20150326085536-f2ke370d8tj8dga8
Tags: 1.4.4-5ubuntu2.4
* SECURITY UPDATE: sidechannel attack on Elgamal
- debian/patches/24-CVE-2014-3591.diff: use ciphertext blinding in
cipher/elgamal.c.
- CVE-2014-3591
* SECURITY UPDATE: sidechannel attack via timing variations in mpi_powm
- debian/patches/25-CVE-2015-0837.diff: avoid timing variations in
mpi/mpi-pow.c, mpi/mpiutil.c, src/mpi.h.
- CVE-2015-0837