1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 2731-1] libgcrypt11 security update

    From Thijs Kinkhorst@1:229/2 to All on Mon Jul 29 21:00:03 2013
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-2731-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst
    July 29, 2013 http://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : libgcrypt11
    Vulnerability : information leak
    Problem type : local
    Debian-specific: no
    CVE ID : CVE-2013-4242

    Yarom and Falkner discovered that RSA secret keys in applications using
    the libgcrypt11 library, for example GnuPG 2.x, could be leaked via
    a side channel attack, where a malicious local user could obtain private
    key information from another user on the system.

    For the oldstable distribution (squeeze), this problem has been fixed in version 1.4.5-2+squeeze1.

    For the stable distribution (wheezy), this problem has been fixed in
    version 1.5.0-5+deb7u1.

    For the testing distribution (jessie) and unstable distribution (sid),
    this problem has been fixed in version 1.5.3-1.

    We recommend that you upgrade your libgcrypt11 packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: http://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.12 (GNU/Linux)

    iQEcBAEBAgAGBQJR9rLaAAoJEFb2GnlAHawEU0kIAIH6NtLVkDhlJ2y63vxpNiUf bD3YPLTeRjQYkvy/ZBlb6U1TArpZIoXUcPj6N0+yvzXzr7rFbXATA5NhaeYr7UEx Zpy08YPCE0rXb9D7O1Qigw7OP1z5HBypRjN76KDSbuu3xDV37CvXU1CjTL8r0qAZ lUe8M59D47MRhnJh/aiAr2djXQDtofjYIWv6M2RhVoGSrFpXrMmCA45DVRRG6Ipo 6tUj3BwB49traxetRyx6CpCVQ3VkwWYjFvpuJUlOETnJ2tg6wmYqKsPpRVVYVDu9 mO4yTP25n+3hMwY9fmJNfRhYZHoYpp6hwaVCIBV8gHbk7i3yjSm/1jNXp/rnifs=
    =12+1
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)