==========================================================================
Ubuntu Security Notice USN-4236-1
January 13, 2020
libgcrypt20 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 19.10
– Ubuntu 19.04
– Ubuntu 18.04 LTS
Summary:
Libgcrypt could be made to expose sensitive information.
Software Description:
– libgcrypt20: LGPL Crypto library
Details:
It was discovered that Libgcrypt was susceptible to a ECDSA timing attack.
An attacker could possibly use this attack to recover sensitive
information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.10:
libgcrypt20 1.8.4-5ubuntu2.1
Ubuntu 19.04:
libgcrypt20 1.8.4-3ubuntu1.1
Ubuntu 18.04 LTS:
libgcrypt20 1.8.1-4ubuntu1.2
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4236-1
CVE-2019-13627
Package Information:
https://launchpad.net/ubuntu/+source/libgcrypt20/1.8.4-5ubuntu2.1
https://launchpad.net/ubuntu/+source/libgcrypt20/1.8.4-3ubuntu1.1
https://launchpad.net/ubuntu/+source/libgcrypt20/1.8.1-4ubuntu1.2
—–BEGIN PGP SIGNATURE—–
iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAl4coygACgkQZWnYVadE
vpMSSQ//RRCvVv8Sne8zfvGFpHpS48cTEpoarotvPHWsZv+Jm354YWSNcPpSYg8Q
nP2oYABE1l55u/T2Hyzlp2Bj4uRhBTQrmyOdYTgQaI2qP191F4aZgIa0R/vIAJLI
CG6fcElmPxjZIA3c0jCPl+PEWWJ7fI0Fqj/vPQsxoTkpyyyy17LFq5eCr36FXMjn
Izj3k7mmcrvgEu/+hancixaUpsm3XeypLBrSHI2/Y7izThl61uO40QxrPCCWd7/M
13CLWm63Ft6qyIVGH/WbPlHffQR9tKRyMUeHM0OyDk22iNZm5XHlTOEgMbKYtztq
Aep4tlFxVt51mNOhyL4yq1SRn0SqUZ7hxeItrrhVApekt0fboC+U3uwbOQzfXlhr
TtdwUs1DNDlpnZBWzMwZd5bZXO0zztVmwz7Cf4XFrTs/XpzXJAmvBuHehpxga0z0
1yTwKROMy6NhMKDOjIb5WU+PZjx6pqS65+Su9tCW7HhCgTeTSG8BOtFys+WBzUXD
SSeQP98vb8xLCC/kBhSw/bCSAnOWhYMVLKPHh00K0HKgwev7TUc94fTIty8OyRy+
nEAGferFPPKFQGLK8qc3NMWyAK18Aa55s5qKA8V5NsqDgXKPdnLoCubF+r1wgihg
EZSV6sJy4EPR/aLzQnaKa8jgQ3d4OVgH6/ZBWfG4QrFv4/WkT5k=
=CtOn
—–END PGP SIGNATURE—–
—
