Package        : libgcrypt20
Version        : 1.6.3-2+deb8u6
CVE ID         : CVE-2019-13627
Debian Bug     : #938938

It was discovered that there was a ECDSA timing attack in the
libgcrypt20 cryptographic library.

For Debian 8 "Jessie", this issue has been fixed in libgcrypt20 version
1.6.3-2+deb8u6.

We recommend that you upgrade your libgcrypt20 packages.


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Debian LTS: DLA-1931-1: libgcrypt20 security update

September 24, 2019
It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library

Summary

We recommend that you upgrade your libgcrypt20 packages.


Regards,

- --
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-



Severity
Package : libgcrypt20
Version : 1.6.3-2+deb8u6
CVE ID : CVE-2019-13627
Debian Bug : #938938

Related News