Red Hat Security Advisory

RHSA-2025:3530

libgcrypt security update

Released 2025-04-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.4) libgcrypt-devel-1.10.0-10.el9_4.1
Red Hat Enterprise Linux BaseOS EUS (v.9.4) libgcrypt-1.10.0-10.el9_4.1

TI-2024-02075 CVE-2024-2236 · GHSA-w2gx-4fh8-wm9f

LOW 31

A timing-based side-channel flaw was found in libgcrypt's RSA implementation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0114 Published 2024-03-06 Partial fix · 9.4.0, 1.10.0-11.el9 +2 CWE-385