Yong Zhang 0ba78399f4 gnupg: CVE-2013-4576 ... GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. NOTE: applications are not typically expected to protect themselves from acoustic side-channel attacks, since this is arguably the responsibility of the physical device. Accordingly, issues of this type would not normally receive a CVE identifier. However, for this issue, the developer has specified a security policy in which GnuPG should offer side-channel resistance, and developer-specified security-policy violations are within the scope of CVE. (From OE-Core rev: 46b80c80b0e008820b34f4360054e1697df2650d) Signed-off-by: Yong Zhang <yong.zhang@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>		2014-03-27 09:42:05 +00:00
..
CVE-2013-4351.patch	gnupg: CVE-2013-4351	2014-03-27 09:42:05 +00:00
CVE-2013-4576.patch	gnupg: CVE-2013-4576	2014-03-27 09:42:05 +00:00
GnuPG1-CVE-2012-6085.patch	gnupg: fix CVE-2012-6085	2013-02-15 12:17:35 +00:00
configure.patch	gnupg: Update checksum, fix configure and compliation issues	2012-02-26 11:45:23 +00:00
curl_typeof_fix_backport.patch	gnupg: Add missing patch for curl_typeof_fix	2012-02-28 12:27:46 +00:00
long-long-thumb.patch	gnupg-1.4.7: Update Patch Info	2012-02-08 00:50:22 +00:00
mips_gcc4.4.patch	gnupg-1.4.7: Update Patch Info	2012-02-08 00:50:22 +00:00