From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple Crypto Libraries Date: Mon, 16 Jul 2018 02:20:34 -0400 Message-ID: <20180716062034.GA3973@jasmine.lan> References: <20180614195049.GB4039@jasmine.lan> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="TB36FDmn/VVEgNH/" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:36092) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fewtc-0003BA-GB for bug-guix@gnu.org; Mon, 16 Jul 2018 02:22:09 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fewtX-0004P2-Dj for bug-guix@gnu.org; Mon, 16 Jul 2018 02:22:08 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:37206) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fewtW-0004OZ-Kq for bug-guix@gnu.org; Mon, 16 Jul 2018 02:22:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1fewtW-00083Q-EE for bug-guix@gnu.org; Mon, 16 Jul 2018 02:22:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Content-Disposition: inline In-Reply-To: <20180614195049.GB4039@jasmine.lan> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 31831@debbugs.gnu.org --TB36FDmn/VVEgNH/ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Fixed in Botan in Guix commit cfe255684cc4deb164d0eaaa2e1ed9804b5ff651. --TB36FDmn/VVEgNH/ Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAltMOTIACgkQJkb6MLrK fwjKtw/+Mv5TVaji6udJMOl8OOiQwIKjZcrtnPYoauL8EIGCpJbcz0DcVNwehgbG wK8CrdvdgE3c2oVg+FiGJ8wZU5hXjpYyy6VgQzqD96S7VosHeSGuXIoV/87MHaB/ nHpJGTzDKALaARxRJbtRG/x4xxN2cvzPuXJKJegdQ+8LBuEPaagT48pNNwguGtGD 77SQBWJBAf9ZyEFv0MLavrsdrgRvuB8J3H8UVUJyuWyXd6Y2DVfBS8lBsezx9SL4 9DMRY+TDhQZZHfs1nOs0nNPIq9UXTbthGOSTqBmCVbHUKh+UD4FCnQI0O77MxiU1 /FzYxy70HJZyBWvJAe85GiN6ATsH4QaIp/qAO/Gd8JYzooKbYUukZtDHTlAxfGLn a/NoKp13na1NNZ7qX63edeSB3e9gRaZkMCH/RVZN67EsdPqt4vlcOdGBmzO+Bpp3 slPnmpgjA+xxHtJ259wcfZkmMSRZUvX+ouK82QTTqfmpMWgjHvV2ITJXbbTOG0q+ 9GZSOlo+L8dpwwpqHBnTkxMt3SAcCHvwVnoC2d8TIu+az16Q02H9rphAszX9j5dW kHzUwMKK655Ugc3pYdFvSqvZmav1bsxsRhY94JNvlHq29MI3z7TD0xBM/n+28sWL AjFAcj2HTdt+/fbeHXCuG2Z4JMUpzQpqYq7AE4N/44Mu1CW751g= =AhNX -----END PGP SIGNATURE----- --TB36FDmn/VVEgNH/--