USN-4236-1 — libgcrypt20 vulnerability

Summary

It was discovered that Libgcrypt was susceptible to a ECDSA timing attack.
An attacker could possibly use this attack to recover sensitive
information.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	libgcrypt20	1.8.1-4ubuntu1.2

Vulnerabilities 1

Unscored —

CVE-2019-13627

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.…

grub2 libgcrypt20 libgcrypt20 libgcrypt11 Debian Ubuntu Azure Linux Alpine

Sep 25, 2019

References

report
https://ubuntu.com/security/CVE-2019-13627

libgcrypt20 vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.…

References