Summary
[1.10.0-11]
- Fix CVE-2024-2236 (RHEL-34579)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libgcrypt | 0:1.10.0-11.el9 |
| Oracle Linux · 9 | libgcrypt-devel | 0:1.10.0-11.el9 |
Vulnerabilities 1
-
Medium 5.9
Libgcrypt: vulnerable to marvin attack
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.