Red Hat Security Advisory

RHSA-2024:9404

libgcrypt security update

Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2024-02075 CVE-2024-2236 · GHSA-w2gx-4fh8-wm9f

LOW 31

A timing-based side-channel flaw was found in libgcrypt's RSA implementation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0114 Published 2024-03-06 Partial fix · 9.4.0, 1.10.0-11.el9 +2 CWE-385