Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Debian Stretch: DSA-4231-1 Critical: Libgcrypt Local Side-Channel Attack

debian
Calendar Grey June 17, 2018
Debian Logo
Libgcrypt20 has received a crucial update that addresses a local side-channel vulnerability which could permit the extraction of private keys. For further details, click here.
It was discovered that Libgcrypt is prone to a local side-channel attack allowing recovery of ECDSA private keys
Topics%20covered

Topics Covered

security advisory critical debian local attack libgcrypt ecdsa key recovery

Summary

For the stable distribution (stretch), this problem has been fixed in
version 1.7.6-2+deb9u3.

We recommend that you upgrade your libgcrypt20 packages.

For the detailed security status of libgcrypt20 please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/source-package/libgcrypt20

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libgcrypt20
CVE ID: CVE-2018-0495

Topics%20covered

Topics Covered

security advisory critical debian local attack libgcrypt ecdsa key recovery

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.