Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Debian 8 DSA-3296-1 Critical: Libcrypto++ Timing Attack Risk

debian
Calendar Grey June 29, 2015
Debian Logo
To protect against remote timing attacks in libcrypto++, as noted in Debian advisory DSA-3296-1, update libcrypto++ and use constant-time functions.
Evgeny Sidorov discovered that libcrypto++, a general purpose C++ cryptographic library, did not properly implement blinding to mask private key operations for the Rabin-Williams d...
Topics%20covered

Topics Covered

security advisory critical debian package update security patch timing attack libcrypto++

Summary

For the oldstable distribution (wheezy), this problem has been fixed
in version 5.6.1-6+deb7u1.

For the stable distribution (jessie), this problem has been fixed in
version 5.6.1-6+deb8u1.

For the testing distribution (stretch), this problem will be fixed
in version 5.6.1-7.

For the unstable distribution (sid), this problem has been fixed in
version 5.6.1-7.

We recommend that you upgrade your libcrypto++ packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libcrypto++
CVE ID: CVE-2015-2141

Topics%20covered

Topics Covered

security advisory critical debian package update security patch timing attack libcrypto++

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here