Keegan Ryan discovered that Libgcrypt was susceptible to a side-channel attack. A local attacker could possibly use this attack to recover ECDSA private keys.
{ "availability": "No subscription required", "binaries": [ { "libgcrypt11-dbg": "1.5.3-2ubuntu4.6", "libgcrypt11-udeb-dbgsym": "1.5.3-2ubuntu4.6", "libgcrypt11-dbgsym": "1.5.3-2ubuntu4.6", "libgcrypt11-doc": "1.5.3-2ubuntu4.6", "libgcrypt11-dev": "1.5.3-2ubuntu4.6", "libgcrypt11-udeb": "1.5.3-2ubuntu4.6", "libgcrypt11-dev-dbgsym": "1.5.3-2ubuntu4.6", "libgcrypt11": "1.5.3-2ubuntu4.6" } ] }
{ "availability": "No subscription required", "binaries": [ { "libgcrypt20-udeb-dbgsym": "1.6.5-2ubuntu0.5", "libgcrypt20-doc": "1.6.5-2ubuntu0.5", "libgcrypt20": "1.6.5-2ubuntu0.5", "libgcrypt20-dev": "1.6.5-2ubuntu0.5", "libgcrypt11-dev": "1.5.4-3+really1.6.5-2ubuntu0.5", "libgcrypt20-dev-dbgsym": "1.6.5-2ubuntu0.5", "libgcrypt20-dbgsym": "1.6.5-2ubuntu0.5", "libgcrypt20-udeb": "1.6.5-2ubuntu0.5" } ] }
{ "availability": "No subscription required", "binaries": [ { "libgcrypt-mingw-w64-dev": "1.8.1-4ubuntu1.1", "libgcrypt20-doc": "1.8.1-4ubuntu1.1", "libgcrypt20": "1.8.1-4ubuntu1.1", "libgcrypt20-dev": "1.8.1-4ubuntu1.1", "libgcrypt11-dev": "1.5.4-3+really1.8.1-4ubuntu1.1", "libgcrypt20-dev-dbgsym": "1.8.1-4ubuntu1.1", "libgcrypt20-dbgsym": "1.8.1-4ubuntu1.1", "libgcrypt20-udeb": "1.8.1-4ubuntu1.1" } ] }