-
644056a...
by
Marc Deslauriers
on 2019-11-28
-
Import patches-unapplied version 1.8.1-4ubuntu1.2 to ubuntu/bionic-security
Imported using git-ubuntu import.
Changelog parent: 40ee1604ea94e3c173778cfeb3c0e00cd1ecbf01
New changelog entries:
* SECURITY UPDATE: ECDSA timing attack
- debian/patches/CVE-2019-13627-1.patch: add mitigation against timing
attack in cipher/ecc-ecdsa.c, mpi/ec.c.
- debian/patches/CVE-2019-13627-2.patch: fix use of nonce, use larger
one in cipher/dsa-common.c, cipher/dsa.c, cipher/ecc-ecdsa.c,
cipher/ecc-gost.c, cipher/pubkey-internal.h.
- CVE-2019-13627
-
40ee160...
by
Marc Deslauriers
on 2018-06-18
-
Import patches-unapplied version 1.8.1-4ubuntu1.1 to ubuntu/bionic-security
Imported using git-ubuntu import.
Changelog parent: 0775432b6fc32d39945741f8be0e485cf0d0ba57
New changelog entries:
* SECURITY UPDATE: memory-cache side-channel attack on ECDSA signatures
- debian/patches/CVE-2018-0495.patch: add blinding for ECDSA in
cipher/ecc-ecdsa.c.
- CVE-2018-0495
-
0775432...
by
Vineetha Kamath
on 2018-02-16
-
Import patches-unapplied version 1.8.1-4ubuntu1 to ubuntu/bionic-proposed
Imported using git-ubuntu import.
Changelog parent: a4eaf7d43c6b401070741b795f0d5c94d0ff18c6
New changelog entries:
* Disable the library reading /proc/sys/crypto/fips_enabled file
and going into FIPS mode. libgcrypt is not a FIPS certified library.
(LP: #1748310)
- debian/patches/disable_fips_enabled_read.patch
-
a4eaf7d...
by
Andreas Metzler <email address hidden>
on 2017-11-15
-
Import patches-unapplied version 1.8.1-4 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 7e80e6146c4504e75a36c4d2336430e49fe03926
New changelog entries:
* Upload to unstable.
-
7e80e61...
by
Andreas Metzler <email address hidden>
on 2017-11-14
-
Import patches-unapplied version 1.8.1-3 to debian/experimental
Imported using git-ubuntu import.
Changelog parent: b0d986ab1dc7c1b84fb642c706557156f2908ff4
New changelog entries:
* Replace 30_fedora_t-secmem-PPC64.diff with
30_Fix-secmem-test-for-machine-with-larger-page.patch and
31_tests-Add-HAVE_MMAP-check-for-MinGW.patch from upstream GIT
LIBGCRYPT-1.8-BRANCH.
* Set Rules-Requires-Root: no.
-
b0d986a...
by
Andreas Metzler <email address hidden>
on 2017-11-04
-
Import patches-unapplied version 1.8.1-2 to debian/experimental
Imported using git-ubuntu import.
Changelog parent: f12c48291aa64a085e44840bfa04eed47353d379
New changelog entries:
* Sync priorities with override file
(libgcrypt11-dev/libgcrypt-mingw-w64-dev: extra -> optional). Bump
Standards-Version to 4.1.1.
* Point watchfile to https URL.
* Use DEB_VERSION_UPSTREAM_REVISION instead of DEB_VERSION to generate fake
version number.
* Sync debian/copyright with upstream's LICENSES file, adding the OCB
license 1. Closes: #879984
* [lintian] Drop trailing whitespace in control and changelog.
* [lintian] Fix typo in copyright file.
-
f12c482...
by
Andreas Metzler <email address hidden>
on 2017-08-27
-
Import patches-unapplied version 1.8.1-1 to debian/experimental
Imported using git-ubuntu import.
Changelog parent: 1688a8a1458fbfb1a27c0401adf430cce13f1dcb
New changelog entries:
* New upstream version.
+ Mitigates a local side-channel attack on Curve25519 dubbed "May the
Fourth be With You". [CVE-2017-0379] Closes: #873383
+ Add the OID SHA384WithECDSA from RFC-7427 to SHA-384. Closes: 873297
* Use @ARCHIVE_EXT@ in watchfile instead of hardcoding bz2.
-
1688a8a...
by
Andreas Metzler <email address hidden>
on 2017-08-19
-
Import patches-unapplied version 1.8.0-2 to debian/experimental
Imported using git-ubuntu import.
Changelog parent: e3aa27bfe6b783e05c9d1f26c74feab331c7e42b
New changelog entries:
* 30_fedora_t-secmem-PPC64.diff from Fedora package: Fix t_secmen on
powerpc which uses a pagesize > 16K.
* Use /usr/share/dpkg/pkg-info.mk instead of invoking dpkg-parsechangelog.
-
e3aa27b...
by
Andreas Metzler <email address hidden>
on 2017-07-19
-
Import patches-unapplied version 1.8.0-1 to debian/experimental
Imported using git-ubuntu import.
Changelog parent: 7bc9486f3f1e7c83d406db8a6834ceaf430c1705
New changelog entries:
* New upstream version.
+ Drop 30_mpi-Fix-mpi_set_secure.patch.
+ Update copyright file.
+ Update symbol file.
+ Bump libgpg-error-dev b-d requirement to >= 1.25.
+ Update algorithm list in package description.
-
7bc9486...
by
Andreas Metzler <email address hidden>
on 2017-07-06
-
Import patches-unapplied version 1.7.8-2 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 555bc75c1286a006f8efe9d7f4792dd21f960993
New changelog entries:
* 30_mpi-Fix-mpi_set_secure.patch from upstream LIBGCRYPT-1-7-BRANCH: Fix
memory allocation in mpi_set_secure. Closes: #866964
* Drop override_dh_strip from debian/rules.
