ELSA-2022-9263 — Moderate: libgcrypt security update (Oracle Linux 8)

Summary

[1.8.5-6_fips]
- Add API to provide hash calculation in RSA/DSA/ECDSA signature
operations [Orabug: 33081130]
- Change Epoch from 1 to 10

[1.8.5-6]
- Fix for CVE-2021-33560 (#1971421)
- Enable HW optimizations in FIPS (#1976137)
- Performance enchancements for ChaCha20 and Poly1305 (#1855231)

[1.8.5-5]
- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	libgcrypt	10:1.8.5-6.el8_fips
Oracle Linux · 8	libgcrypt-devel	10:1.8.5-6.el8_fips

Vulnerabilities 1

High 7.5

CVE-2021-33560 Public exploit

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to addre…

libgcrypt20 libgcrypt20 libgcrypt Debian Ubuntu Alpine

Jun 8, 2021

Moderate: libgcrypt security update (Oracle Linux 8)

Summary

Fixed packages 2

Vulnerabilities 1

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to addre…