ubuntu/+source/nettle:applied/ubuntu/trusty-devel

Last commit made on 2017-02-06
Get this branch:
git clone -b applied/ubuntu/trusty-devel https://git.launchpad.net/ubuntu/+source/nettle
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/trusty-devel
Repository:
lp:ubuntu/+source/nettle

Recent commits

0755aa1... by Marc Deslauriers on 2017-02-03

Import patches-applied version 2.7.1-1ubuntu0.2 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: c06263db87c10bdc08215917a3517bfa929c192a
Unapplied parent: b87f72cf3a019307ffc34ae65058ebc3eee4d59f

New changelog entries:
  * SECURITY UPDATE: RSA cache timing side-channel attack
    - debian/patches/CVE-2016-6489.patch: use mpz_powm_sec and check for
      invalid keys in dsa-sign.c, rsa-blind.c, rsa-pkcs1-sign-tr.c,
      rsa-pkcs1-sign.c, rsa-sign.c, rsa.c, testsuite/rsa-test.c,
      rsa-decrypt-tr.c, rsa-decrypt.c.
    - CVE-2016-6489

b87f72c... by Marc Deslauriers on 2017-02-03

fix RSA cache timing side-channel attack

Gbp-Pq: CVE-2016-6489.patch.

eda3dd1... by Marc Deslauriers on 2017-02-03

[PATCH] Fix carry folding bug in x86_64 ecc_384_modp. Problem reported by Hanno Böck.

Gbp-Pq: CVE-2015-8804.patch.

a0f3c38... by Marc Deslauriers on 2017-02-03

[PATCH] Fixed miscomputation bugs in secp-256r1 modulo functions.

Gbp-Pq: CVE-2015-8803_8805.patch.

49cca90... by Marc Deslauriers on 2017-02-03

Import patches-unapplied version 2.7.1-1ubuntu0.2 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 6e9f13e20a3df83fc7a3fa43e78e4eeffa2cf4e3

New changelog entries:
  * SECURITY UPDATE: RSA cache timing side-channel attack
    - debian/patches/CVE-2016-6489.patch: use mpz_powm_sec and check for
      invalid keys in dsa-sign.c, rsa-blind.c, rsa-pkcs1-sign-tr.c,
      rsa-pkcs1-sign.c, rsa-sign.c, rsa.c, testsuite/rsa-test.c,
      rsa-decrypt-tr.c, rsa-decrypt.c.
    - CVE-2016-6489

c06263d... by Marc Deslauriers on 2016-02-10

Import patches-applied version 2.7.1-1ubuntu0.1 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: d016d476cf46b419bfec3b42929a4332c2cb413a
Unapplied parent: 85f1ed8d7ad7a9d560b22eec77fc1227654c2318

New changelog entries:
  * SECURITY UPDATE: miscomputation bugs in secp-256r1 modulo functions
    - debian/patches/CVE-2015-8803_8805.patch: fix carry propagation bugs
      in ecc-256.c.
    - CVE-2015-8803
    - CVE-2015-8805
  * SECURITY UPDATE: carry folding bug in x86_64 ecc_384_modp
    - debian/patches/CVE-2015-8804.patch: fix carry propagation bug in
      x86_64/ecc-384-modp.asm.
    - CVE-2015-8804

6e9f13e... by Marc Deslauriers on 2016-02-10

Import patches-unapplied version 2.7.1-1ubuntu0.1 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 9cad1b50573c49b3a46790d6728eea9e15b7563e

New changelog entries:
  * SECURITY UPDATE: miscomputation bugs in secp-256r1 modulo functions
    - debian/patches/CVE-2015-8803_8805.patch: fix carry propagation bugs
      in ecc-256.c.
    - CVE-2015-8803
    - CVE-2015-8805
  * SECURITY UPDATE: carry folding bug in x86_64 ecc_384_modp
    - debian/patches/CVE-2015-8804.patch: fix carry propagation bug in
      x86_64/ecc-384-modp.asm.
    - CVE-2015-8804

85f1ed8... by Marc Deslauriers on 2016-02-10

[PATCH] Fix carry folding bug in x86_64 ecc_384_modp. Problem reported by Hanno Böck.

Gbp-Pq: CVE-2015-8804.patch.

bb24937... by Marc Deslauriers on 2016-02-10

[PATCH] Fixed miscomputation bugs in secp-256r1 modulo functions.

Gbp-Pq: CVE-2015-8803_8805.patch.

d016d47... by Magnus Holmgren on 2013-05-29

Import patches-applied version 2.7.1-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: b25b46e59ff4fe1c859216ee73c7785962c81a8c
Unapplied parent: 9cad1b50573c49b3a46790d6728eea9e15b7563e

New changelog entries:
  * New upstream bugfix release.