Re: [BLFS Trac] #23152: libgcrypt-1.12.2

#23152: libgcrypt-1.12.2
-------------------------+-------------------------
 Reporter:  Bruce Dubbs  |       Owner:  Joe Locash
     Type:  enhancement  |      Status:  reopened
 Priority:  normal       |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-------------------------
Changes (by pierre):

 * resolution:  fixed =>
 * status:  closed => reopened

Comment:

 From Werner Koch on gnupg-devel list:
 {{{
 Hello!

 We are pleased to announce the availability of couple of new Libgcrypt
 versions: 1.12.2, 1.11.3, and 1.10.4 .  It is suggested to use 1.12.2
 which is fully compatible with all earlier versions.

 This version fixes a security bug [T8211] which can be used used to
 mount a DoS using ECDH encryption (with NIST, Brainpool, X448, or X25519
 curves).  Note that GnuPG versions since 2.5.7 are not affected by this
 bug due to the use of a different encryption API.

 Another security bug [T8208] was fixed in the Dilithium signing
 algorithm which is available since version 1.12.0.

 }}}
 T8211 bug is not accessible AFAICT
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23152#comment:3>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page