File _patchinfo of Package patchinfo

<patchinfo incident="4006">
  <packager>vitezslav_cizek</packager>
  <issue tracker="bnc" id="944835">VUL-0: RSA-CRT key leaks overall tracker bug</issue>
  <category>security</category>
  <rating>low</rating>
  <summary>Security update for libgcrypt</summary>
  <description>libgcrypt was updated to include countermeasures against Lenstra's fault attack on RSA Chinese Remainder Theorem optimization in RSA.

A signature verification step was updated to protect against leaks of private keys in case of hardware faults or implementation errors in numeric libraries.

GnuPG already performed this check by itself and was not affected. This fix is equivalent, but not equal to CVE-2015-5738</description>
</patchinfo>
openSUSE Build Service is sponsored by