-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2016-02-10 11:12:46 UTC
-
Revision ID:
package-import@ubuntu.com-20160210111246-ev7ypu9p72zp375k
Tags: 1.5.0-3ubuntu0.5
* SECURITY UPDATE: side-channel attack on ECDH
- debian/patches/CVE-2015-7511.patch: perform input validation in
cipher/ecc.c, src/mpi.h, use constant-time multiplication in
mpi/ec.c.
- CVE-2015-7511
* debian/patches/fix_ec_point_addition.patch: fix addition of EC points
in mpi/ec.c.