Summary
Daniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcrypt was
susceptible to an adaptive chosen ciphertext attack via physical side
channels. A local attacker could use this attack to possibly recover
private keys.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libgcrypt11 | 1.5.3-2ubuntu4.1 |
Vulnerabilities 1
-
Unscored —
Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and cip…
References
-
report
https://ubuntu.com/security/CVE-2014-5270