Libgcrypt version 1.6.3 [1] and GnuPG version 1.4.19 [2] fix a side-channel attack which can potentially lead to an information leak. This issue is different from CVE-2014-5270. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3591