-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 09 Apr 2015 10:00:05 +0200 Source: libgcrypt11 Binary: libgcrypt11-doc libgcrypt11-dev libgcrypt11-dbg libgcrypt11 Architecture: source all i386 Version: 1.4.5-2+squeeze3 Distribution: squeeze-lts Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: libgcrypt11 - LGPL Crypto library - runtime library libgcrypt11-dbg - LGPL Crypto library - debugger files libgcrypt11-dev - LGPL Crypto library - development files libgcrypt11-doc - LGPL Crypto library - documentation Changes: libgcrypt11 (1.4.5-2+squeeze3) squeeze-lts; urgency=high . * Non-maintainer upload by the Squeeze LTS Team. * Use ciphertext blinding for Elgamal decryption to counteract a side-channel attack as per CVE-2014-3591 * Fix data-dependent timing variations in the modular exponentiation function that could be used to mount a side-channel attack as per CVE-2015-0837 Checksums-Sha1: 2cea5f58fc5782773d8a8c101da5582fa52a86e2 2369 libgcrypt11_1.4.5-2+squeeze3.dsc 8d83a60ca55f2ea40b5d5bc99463905b7a1dcb56 1419443 libgcrypt11_1.4.5.orig.tar.gz 3ab0c6f1846a5a988684a6960e92c7cd82a5e7e9 23989 libgcrypt11_1.4.5-2+squeeze3.debian.tar.gz 69aeb25df04a1a6a31fa365b7ba2d4b3df7e3d98 671098 libgcrypt11-doc_1.4.5-2+squeeze3_all.deb 6a5838d88f31a9aef12116186432e814770fd47a 363810 libgcrypt11-dev_1.4.5-2+squeeze3_i386.deb 574e7e56f18216f930a6ff2088f38d4d8f4499a9 364176 libgcrypt11-dbg_1.4.5-2+squeeze3_i386.deb eede65670ce3fb5a82d84dbd6d461373b8c1ea25 267880 libgcrypt11_1.4.5-2+squeeze3_i386.deb Checksums-Sha256: 2df16131dc509df5daa3e8b70a4e6128420093308b64976321314c33362e99eb 2369 libgcrypt11_1.4.5-2+squeeze3.dsc 01652928917ad47e91ab8e0c150d62e0ef288f13b77842367c832109c3af788f 1419443 libgcrypt11_1.4.5.orig.tar.gz b68008b1809bfb8ef90aded39f993ee0f012b2e03ed8c781c54b56ba7c7a85cf 23989 libgcrypt11_1.4.5-2+squeeze3.debian.tar.gz ecdb4c700551ccbd2260ba55930226152af577cc6547490d17bca42f617a6e60 671098 libgcrypt11-doc_1.4.5-2+squeeze3_all.deb e21f1570b6045f089ffe93902af20dbc535608b51661059893e634388ec3e6da 363810 libgcrypt11-dev_1.4.5-2+squeeze3_i386.deb 473e20ae2fdc3a3f65e1359fcf909019cde2078af848de022e33d9baf8f4b767 364176 libgcrypt11-dbg_1.4.5-2+squeeze3_i386.deb 142bcf855aaafe65520f85f801d4fcbfd6bc8f0356daa7d498246e3c9aa42682 267880 libgcrypt11_1.4.5-2+squeeze3_i386.deb Files: f5e331c06e5c5a2185609d78a4abb756 2369 libs optional libgcrypt11_1.4.5-2+squeeze3.dsc 325294c12e7b99d82dee3a8bf8c2c28e 1419443 libs optional libgcrypt11_1.4.5.orig.tar.gz 700e2579dc8389a85626ebd037bbc703 23989 libs optional libgcrypt11_1.4.5-2+squeeze3.debian.tar.gz 15c85ae1e59aa7f8bf10568913c983fa 671098 doc optional libgcrypt11-doc_1.4.5-2+squeeze3_all.deb a2ecf066fcafaa7d3291376df705b728 363810 libdevel optional libgcrypt11-dev_1.4.5-2+squeeze3_i386.deb 23eac85e290c69db4a95ec4ff116cd7e 364176 debug extra libgcrypt11-dbg_1.4.5-2+squeeze3_i386.deb b24baadb6d8e17d7e0429954bdf53f96 267880 libs standard libgcrypt11_1.4.5-2+squeeze3_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJVJkIIXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2MjAxRkJGRkRCQkRFMDc4MjJFQUJCOTY5 NkZDQUMwRDM4N0I1ODQ3AAoJEJb8rA04e1hH8ywP/0WfxI88My2rkEp9q66M7Qtt 011iCFuU82fidY+LySfDHuuo2PJ1kjqoeAdP6/8ZOuHS4Ww30zlBLR6o5wc96+8B GanDW3v80hPJHpp9Z3jVVbj5CeOazxg5GDKdTjbd83YgbWgl+FbjcnoeumksXAPt a3krwAxPIVrRZiLuhIeHljoURTPjOLZGAg9s2cMg2nlmAsX0wXO9jGoLf6dk1Bqm 4JKJD0TMWzoxEgz/GnPCXyGkD500UIo0wN2mmEWZ6d6VjPFcjXQ0s7rHunFxfRIQ zb7/hl3seLQKCa55R7PTo0jyJxeZgewcUlHxWEnwlboA2T51ZnfV1Z278oIcXfo8 iWxvPdwUzdbg0855C54me2+BEMOYHIROlt0Ow+3ch6mIKz0ZBETwEVHVAemF9LtZ ZNH39TWjNX7ErACXQoWEfBCbT7WMpM5UyVDleyu/11EwwVWHaztMfMmSq47Jh5sz YUIypavAywcRnoJwZZovtMQINSYedZ1oUFzj1Xgo7ZQxdo4htddzAHX+NfU3S3kL ZpDqH5pmfG3s2S/QaJlhYEum8rwLV7NeibhOQ69ifCxHho0orv6Cbt0pGxFhUNQZ ddJulN0n+NXF5VnhBPmbZMk2To8T4ZwEVJJmOOjbmrvJX09S+5b8zcVu9AkpvfOv whk+iGiN5/kOsuj5tUhp =zVob -----END PGP SIGNATURE-----