summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorWerner Koch <wk@gnupg.org>2016-08-17 13:46:32 +0200
committerWerner Koch <wk@gnupg.org>2016-08-17 13:46:32 +0200
commite28f3f3d7b694cf440700a49d5927b3311cdd071 (patch)
treeddcb94406f520550a77b3a5cb66c422522e11aa8
parentc748f87436d693f092a4484571a3cc7f650b5c81 (diff)
downloadlibgcrypt-e28f3f3d7b694cf440700a49d5927b3311cdd071.tar.gz
Release 1.6.6libgcrypt-1.6.6
* configure.ac: Set LT version to C20/A0/R6. Signed-off-by: Werner Koch <wk@gnupg.org>
-rw-r--r--NEWS7
-rw-r--r--configure.ac2
2 files changed, 7 insertions, 2 deletions
diff --git a/NEWS b/NEWS
index 22ce5827..0686dff3 100644
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,11 @@
-Noteworthy changes in version 1.6.6 (unreleased) [C20/A0/R_]
+Noteworthy changes in version 1.6.6 (2016-08-17) [C20/A0/R6]
------------------------------------------------
+ * Fix critical security bug in the RNG [CVE-2016-6313]. An attacker
+ who obtains 580 bytes from the standard RNG can trivially predict
+ the next 20 bytes of output. Problem detected by Felix Dörre and
+ Vladimir Klebanov, KIT.
+
Noteworthy changes in version 1.6.5 (2016-02-09) [C20/A0/R5]
------------------------------------------------
diff --git a/configure.ac b/configure.ac
index 75d3a061..d427903c 100644
--- a/configure.ac
+++ b/configure.ac
@@ -56,7 +56,7 @@ AC_INIT([libgcrypt],[mym4_full_version],[http://bugs.gnupg.org])
# (No interfaces changed: REVISION++)
LIBGCRYPT_LT_CURRENT=20
LIBGCRYPT_LT_AGE=0
-LIBGCRYPT_LT_REVISION=5
+LIBGCRYPT_LT_REVISION=6
# If the API is changed in an incompatible way: increment the next counter.