ELSA-2021-4409 — Moderate: libgcrypt security and bug fix update (Oracle Linux 8)

Summary

[1.8.5-6]
- Fix for CVE-2021-33560 (#1971421)
- Enable HW optimizations in FIPS (#1976137)
- Performance enchancements for ChaCha20 and Poly1305 (#1855231)

[1.8.5-5]
- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	libgcrypt	0:1.8.5-6.el8
Oracle Linux · 8	libgcrypt-devel	0:1.8.5-6.el8

Vulnerabilities 1

High 7.5

CVE-2021-33560 Public exploit

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to addre…

libgcrypt20 libgcrypt20 libgcrypt Debian Ubuntu Alpine

Jun 8, 2021

Moderate: libgcrypt security and bug fix update (Oracle Linux 8)

Summary

Fixed packages 2

Vulnerabilities 1

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to addre…