{"action":"Upgrade libgcrypt20 to 1.7.3-1 or later.","affected":[{"fixed":"1.7.3-1","introduced":"0"}],"component":"libgcrypt20","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1.7.3-1"],"id":"tcs_01M5NBP42EEK4FKA15QQ60ETVD","modified_at":"2026-09-22T07:02:11.060503133Z","published_at":"2016-12-13T20:59:04.267Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-6313","https://security-tracker.debian.org/tracker/CVE-2016-6313"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-6313#Debian:13/libgcrypt20","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-6313"}],"summary":"The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 1"}