~ubuntu-branches/ubuntu/trusty/libgcrypt11/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/libgcrypt11/trusty-security » Changes from revision 42

From Revision 42 to 23

Rev	Summary	Authors	Tags	Date
42	* SECURITY UPDATE: random number generator prediction * SECURITY UPDATE: random number generator prediction - debian/patches/CVE-2016-6313-1.patch: improve the diagram showing the random mixing in random/random-csprng.c. - debian/patches/CVE-2016-6313-2.patch: hash continuous areas in the csprng pool in random/random-csprng.c. - CVE-2016-6313	Marc Deslauriers	1.5.3-2ubuntu4.4	7 years ago
41	* SECURITY UPDATE: side-channel attack on ECDH * SECURITY UPDATE: side-channel attack on ECDH - debian/patches/CVE-2015-7511.patch: perform input validation in cipher/ecc.c, src/mpi.h, use constant-time multiplication in mpi/ec.c. - CVE-2015-7511	Marc Deslauriers	1.5.3-2ubuntu4.3	8 years ago
40	* SECURITY UPDATE: sidechannel attack on Elgamal * SECURITY UPDATE: sidechannel attack on Elgamal - debian/patches/CVE-2014-3591.patch: use ciphertext blinding in cipher/elgamal.c. - CVE-2014-3591 * SECURITY UPDATE: sidechannel attack via timing variations in mpi_powm - debian/patches/CVE-2015-0837.patch: avoid timing variations in mpi/mpi-pow.c, mpi/mpiutil.c, src/mpi.h. - CVE-2015-0837	Marc Deslauriers	1.5.3-2ubuntu4.2	9 years ago
39	* SECURITY UPDATE: side-channel attack on Elgamal encryption... * SECURITY UPDATE: side-channel attack on Elgamal encryption subkeys - debian/patches/add_gcry_divide_by_zero.patch: replace deliberate division by zero with new _gcry_divide_by_zero(). - debian/patches/CVE-2014-5270.patch: use sliding window method for exponentiation algorithm in mpi/mpi-pow.c. - CVE-2014-5270	Marc Deslauriers	1.5.3-2ubuntu4.1	9 years ago
38	Move texinfo to Build-Depends. Move texinfo to Build-Depends.	Matthias Klose	1.5.3-2ubuntu4	10 years ago
37	* Merge from Debian unstable. Remaining changes: * Merge from Debian unstable. Remaining changes: - no-global-init-thread-callbacks.diff: Do not call global_init when setting thread callbacks	Seth Arnold	1.5.3-2ubuntu1	10 years ago
36	* SECURITY UPDATE: The path of execution in an exponentiatio... * SECURITY UPDATE: The path of execution in an exponentiation function may depend upon secret key data, allowing a local attacker to determine the contents of the secret key through a side-channel attack. - debian/patches/CVE-2013-4242.diff: always perform the mpi_mul for exponents in secure memory. Based on upstream patch. - CVE-2013-4242	Seth Arnold	1.5.0-3ubuntu3	10 years ago
35	Reverts previous upload since it broke graphical login with ... Reverts previous upload since it broke graphical login with gnupg-agent installed (LP: #1076906)	Adam Stokes	1.5.0-3ubuntu2.1	11 years ago
34	[Howard Chu] [Howard Chu] debian/patches/enable-global-init-secure-memory.patch: Fix regression during disable/suspend of secure memory (LP: #1013798)	Adam Stokes	1.5.0-3ubuntu2	11 years ago
33	Do not call global_init when setting thread callbacks (LP: #... Do not call global_init when setting thread callbacks (LP: #423252)	Adam Stokes	1.5.0-3ubuntu1	11 years ago
32	* Upload to unstable. * Upload to unstable. * Drop 20_workaroundarmgcc.diff (1.4.6/unstable). It seems to be unnecessary with 1.5.0. * libgcrypt11 Breaks gnupg2\|gpgsm (<< 2.0.17-2ubuntu2) and libgnutls26 (<< 2.12.7-3). See https://bugs.launchpad.net/bugs/815190 and https://lists.gnu.org/archive/html/gnutls-devel/2011-07/msg00001.html	Andreas Metzler	1.5.0-3	12 years ago
31	* Merge multi-arch changes (1.4.6-6 and 1.4.6-7), drop libto... * Merge multi-arch changes (1.4.6-6 and 1.4.6-7), drop libtool la file. * Drop CFLAGS += -Wall again, it has become unnecessary. * New upstream version. * Bump shlibs	Andreas Metzler	1.5.0-1	12 years ago
30	* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes: - build for multiarch.	Steve Langasek	1.4.6-5ubuntu1	12 years ago
29	releasing version 1.4.6-4ubuntu2 releasing version 1.4.6-4ubuntu2	Steve Langasek	1.4.6-4ubuntu2	13 years ago
28	Move libgcrypt.so into /usr/lib/$(DEB_HOST_MULTIARCH) where ... Move libgcrypt.so into /usr/lib/$(DEB_HOST_MULTIARCH) where it belongs.	Steve Langasek		13 years ago
27	releasing version 1.4.6-4ubuntu1 releasing version 1.4.6-4ubuntu1	Steve Langasek	1.4.6-4ubuntu1	13 years ago
26	run update-maintainer run update-maintainer	Steve Langasek		13 years ago
25	FFe LP: #733501: build for multiarch. FFe LP: #733501: build for multiarch.	Steve Langasek		13 years ago
24	* Stricter version requirement (>> 1.10-0.1 instead of >= 1.... * Stricter version requirement (>> 1.10-0.1 instead of >= 1.4) on the libgpg-error-dev build-dependency, to get correct dependencies in the udeb. * Use debhelper compatibility level 7.	Andreas Metzler	1.4.6-4	13 years ago
23	Fix build failure with DSO link changes. Fix build failure with DSO link changes.	Matthias Klose	1.4.5-2ubuntu2	13 years ago

Older »