tocsin

Alpine/gnupg1: medium 6.8

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion.

Action: Upgrade gnupg1 to 1.4.23-r0 or later.

Affected

introducedfixedlast affected
01.4.23-r0-

Fixed versions

1.4.23-r0

Sources

published · modified · JSON