Updated libcrypt packages fix a security vulnerability

🗓️ 01 Jul 2018 22:17:47Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 40 Views

Updated libgcrypt package fixes key-leak vulnerabilit

Reporter	Title	Published	Views	Family All 214
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities	19 Aug 201920:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance affected by NSS and libgcrypt vulnerabilities (CVE-2018-12404 and CVE-2018-0495)	23 Jan 202015:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect PowerKVM	17 Dec 201815:00	–	ibm
IBM Security Bulletins	Security Bulletin: Potential side-channel cryptographic vulnerabilities in IBM DataPower Gateway	8 Jun 202121:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple openssl vulnerabilities.	7 Dec 201802:45	–	ibm
FreeBSD	libgcrypt -- side-channel attack vulnerability	13 Jun 201800:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : openssl (ALAS-2018-1102)	9 Nov 201800:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nss (ALAS-2019-1305)	4 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openssl (ALAS-2018-1102)	7 Dec 201800:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	5	any	libgcrypt	1.5.4-5.5	libgcrypt-1.5.4-5.5.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
lists	www.lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html
nccgroup	www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/

01 Jul 2018 22:17Current

2.6Low risk

Vulners AI Score2.6

CVSS 21.9

CVSS 34.7

EPSS0.00296

libgcrypt security vulnerability key-leak ecdsa dsa tls ssh memory caches unix