Linux · Security advisory · November 9, 2021
RLSA-2021:4409: libgcrypt security update
RLSA-2021:4409, released November 9, 2021, fixes 1 CVE in libgcrypt (version 0:1.8.5-6.el8). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0237
83rd percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| libgcrypt | rocky 8 | 0:1.8.5-6.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-33560 | Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm and the window size is not chosen appropriately. This for example affects use of ElGamal in OpenPGP. | 7.5 | 0.0237 | None reported |
Showing 1 to 1 of 1
1