USN-3347-2: Libgcrypt vulnerability

USN-3347-1 fixed a vulnerability in Libgcrypt. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom...

Fedora 26 : libgcrypt (2017-22107b1986)

New upstream release fixing moderate security issue CVE-2017-7526. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for libgcrypt FEDORA-2017-3b70d0b976

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2017:1866-1 Security update for compat-libgcrypt11

This update for libgcrypt fixes the following security issue: - CVE-2017-7526: Hardening against local side-channel attack. bsc1046607...

Ubuntu: Security Advisory (USN-3347-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libgcrypt (openSUSE-2017-796)

This update for libgcrypt fixes the following issues : - CVE-2017-7526: Hardening against a local side-channel attack in RSA key handling has been added bsc1046607 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SUSE-SU-2017:1794-1 Security update for libgcrypt

This update for libgcrypt fixes the following issues: - CVE-2017-7526: Hardening against a local side-channel attack in RSA key handling has been added bsc1046607...

SUSE-SU-2017:1793-1 Security update for libgcrypt

This update for libgcrypt fixes the following issues: - CVE-2017-7526: Hardening a against local side-channel attack in RSA key handling has been added bsc1046607...

[SECURITY] [DLA 1015-1] libgcrypt11 security update

Package : libgcrypt11 Version : 1.5.0-5+deb7u6 CVE ID : CVE-2017-7526 It was discovered that there was a key disclosure vulnerability in libgcrypt11 a library of cryptographic routines: It is well known that constant-time implementations of modular exponentiation cannot use sliding windows...

Libgcrypt Attack Allowed Recovery of RSA-1024 Keys

The cryptographic library Libgcrypt is vulnerable to a local side-channel attack; something researchers warn could allow full key recovery for RSA-1024. The vulnerability CVE-2017-7526 is tied to the fact that Libgcrypt, which is based on code from GnuPG, uses left to right sliding windows...

Fedora 25 : libgcrypt (2017-a348b32eb5)

New upstream release fixing moderate security issue CVE-2017-7526. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[ASA-201707-1] libgcrypt: private key recovery

Arch Linux Security Advisory ASA-201707-1 ========================================= Severity: High Date : 2017-07-03 CVE-ID : CVE-2017-7526 Package : libgcrypt Type : private key recovery Remote : No Link : https://security.archlinux.org/AVG-338 Summary ======= The package libgcrypt before versio...

[SECURITY] [DSA 3901-1] libgcrypt20 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3901-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 02, 2017 https://www.debian.org/security/faq -...

[slackware-security] libgcrypt

New libgcrypt packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libgcrypt-1.7.8-i586-1slack14.2.txz: Upgraded. Mitigate a local flush+reload side-channel attack on RSA secret keys dubbed "Slidin...

CVE-2017-7526

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This...

CVE-2015-7526

...

CVE-2015-7526

CVE-2015-7526 entry is rejected and not associated with a vulnerability per the Initial Description.

CVE-2016-7526

coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...

CVE-2016-7526

CVE-2016-7526 affects ImageMagick: the wpg image coder (coders/wpg.c) is vulnerable to remote exploitation via a crafted file, causing an out-of-bounds write and denial of service. The vulnerability is confined to the ImageMagick code path handling WPG files; no other products are indicated as af...

openSUSE Security Update : ImageMagick (openSUSE-2016-1282)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...