Summary
[1.5.3-13.1]
- fix CVE-2016-6313 - predictable PRNG output (#1366105)
[1.5.3-13]
- touch only urandom in the selftest and when /dev/random is
unavailable for example by SELinux confinement
- fix the RSA selftest key (p q swap)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libgcrypt | 0:1.5.3-13.el7_3.1 |
| Oracle Linux · 7 | libgcrypt-devel | 0:1.5.3-13.el7_3.1 |
Vulnerabilities 1
-
Unscored —
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7…