From mboxrd@z Thu Jan  1 00:00:00 1970
From: =?UTF-8?Q?G=C3=A1bor?= Boskovits <boskovits@gmail.com>
Subject: bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple
	Crypto Libraries
Date: Thu, 14 Jun 2018 22:44:08 +0200
Message-ID: <CAE4v=pi8R0YTgc_UMJsC=+0A=NMWdr1cNTZUp0BuD6R_MPNf8g@mail.gmail.com>
References: <20180614192211.GA21522@jasmine.lan>
	<20180614195049.GB4039@jasmine.lan>
	<CAE4v=pjPFsmHKG8S72fqk2DJ9iw1GVNa+0eVUwOmVqxiUWi3bg@mail.gmail.com>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="00000000000038951f056ea02981"
Return-path: <bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:34667)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fTZ7D-0007F4-DA
	for bug-guix@gnu.org; Thu, 14 Jun 2018 16:45:08 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fTZ78-0002T1-SH
	for bug-guix@gnu.org; Thu, 14 Jun 2018 16:45:07 -0400
Received: from debbugs.gnu.org ([208.118.235.43]:40661)
	by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
	(Exim 4.71) (envelope-from <Debian-debbugs@debbugs.gnu.org>)
	id 1fTZ78-0002Sm-Nt
	for bug-guix@gnu.org; Thu, 14 Jun 2018 16:45:02 -0400
Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fTZ78-0003YL-Gn
	for bug-guix@gnu.org; Thu, 14 Jun 2018 16:45:02 -0400
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
Resent-Message-ID: <handler.31831.B31831.152900905613546@debbugs.gnu.org>
In-Reply-To: <CAE4v=pjPFsmHKG8S72fqk2DJ9iw1GVNa+0eVUwOmVqxiUWi3bg@mail.gmail.com>
List-Id: Bug reports for GNU Guix <bug-guix.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/bug-guix>,
	<mailto:bug-guix-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/bug-guix/>
List-Post: <mailto:bug-guix@gnu.org>
List-Help: <mailto:bug-guix-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/bug-guix>,
	<mailto:bug-guix-request@gnu.org?subject=subscribe>
Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org
Sender: "bug-Guix" <bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org>
To: Leo Famulari <leo@famulari.name>
Cc: 31831@debbugs.gnu.org

--00000000000038951f056ea02981
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

2018-06-14 21:53 GMT+02:00 G=C3=A1bor Boskovits <boskovits@gmail.com>:

> 2018-06-14 21:50 GMT+02:00 Leo Famulari <leo@famulari.name>:
>
>> I see that Efraim already updated libgcrypt. Awesome, thanks Efraim!
>>
>> I'll try OpenSSL next.
>>
>
> I'll try libressl.
>
Here it is: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D31832
<https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D31832>

--00000000000038951f056ea02981
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">2018=
-06-14 21:53 GMT+02:00 G=C3=A1bor Boskovits <span dir=3D"ltr">&lt;<a href=
=3D"mailto:boskovits@gmail.com" target=3D"_blank">boskovits@gmail.com</a>&g=
t;</span>:<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px=
 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D=
"ltr"><span class=3D"gmail-"><div class=3D"gmail_extra"><div class=3D"gmail=
_quote">2018-06-14 21:50 GMT+02:00 Leo Famulari <span dir=3D"ltr">&lt;<a hr=
ef=3D"mailto:leo@famulari.name" target=3D"_blank">leo@famulari.name</a>&gt;=
</span>:<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0=
.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">I see that Ef=
raim already updated libgcrypt. Awesome, thanks Efraim!<br>
<br>
I&#39;ll try OpenSSL next.<br>
</blockquote></div><br></div></span><div class=3D"gmail_extra">I&#39;ll try=
 libressl.</div></div>
</blockquote></div>Here it is:<a href=3D"https://debbugs.gnu.org/cgi/bugrep=
ort.cgi?bug=3D31832">=C2=A0https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D=
31832</a></div></div>

--00000000000038951f056ea02981--