Red Hat Security Advisory

RHSA-2020:4482

libgcrypt security, bug fix, and enhancement update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) libgcrypt-1.8.5-4.el8, libgcrypt-devel-1.8.5-4.el8

TI-2019-10240 CVE-2019-13627 · GHSA-vwvj-6vw9-cw8w

LOW 29

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00545 Published 2019-09-25 Fixed CWE-203