Summary
Daniel Genkin, Lev Pachmanov, Itamar Pipman and Eran Tromer discovered
that Libgcrypt was susceptible to an attack via physical side channels. A
local attacker could use this attack to possibly recover private keys.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libgcrypt11 | 1.5.3-2ubuntu4.3 |
Vulnerabilities 1
-
Unscored —
Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it …
References
-
report
https://ubuntu.com/security/CVE-2015-7511