Lucene search
AlmaLinuxALSA-2022:5311HistoryJun 30, 2022 - 12:00 a.m.
Moderate: libgcrypt security update
2022-06-3000:00:00
errata.almalinux.org
23
libgcrypt
security update
elgamal
plaintext recovery fix
cve-2021-40528
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
57.6%
The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.
Security Fix(es):
- libgcrypt: ElGamal implementation allows plaintext recovery (CVE-2021-40528)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | x86_64 | libgcrypt-devel | < 1.8.5-7.el8_6 | libgcrypt-devel-1.8.5-7.el8_6.x86_64.rpm |
| almalinux | 8 | i686 | libgcrypt-devel | < 1.8.5-7.el8_6 | libgcrypt-devel-1.8.5-7.el8_6.i686.rpm |
| almalinux | 8 | x86_64 | libgcrypt | < 1.8.5-7.el8_6 | libgcrypt-1.8.5-7.el8_6.x86_64.rpm |
| almalinux | 8 | i686 | libgcrypt | < 1.8.5-7.el8_6 | libgcrypt-1.8.5-7.el8_6.i686.rpm |
| almalinux | 8 | aarch64 | libgcrypt-devel | < 1.8.5-7.el8_6 | libgcrypt-devel-1.8.5-7.el8_6.aarch64.rpm |
| almalinux | 8 | aarch64 | libgcrypt | < 1.8.5-7.el8_6 | libgcrypt-1.8.5-7.el8_6.aarch64.rpm |
| almalinux | 8 | ppc64le | libgcrypt-devel | < 1.8.5-7.el8_6 | libgcrypt-devel-1.8.5-7.el8_6.ppc64le.rpm |
| almalinux | 8 | ppc64le | libgcrypt | < 1.8.5-7.el8_6 | libgcrypt-1.8.5-7.el8_6.ppc64le.rpm |
Related
osv
osv
Moderate: libgcrypt security update
2022-06-30 00:00:00
libgcrypt-devel-1.10.1-1.1 on GA media
2024-06-15 00:00:00
CVE-2021-40528
2021-09-06 19:15:07
openvas
openvas
Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2022-1209)
2022-02-26 00:00:00
Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2022-1404)
2022-04-13 00:00:00
Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2021-2914)
2021-12-31 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-40528 affecting package libgcrypt 1.8.7-3
2021-11-06 06:45:24
nessus
nessus
Oracle Linux 8 : libgcrypt (ELSA-2022-9564)
2022-07-08 00:00:00
Rocky Linux 8 : libgcrypt (RLSA-2022:5311)
2023-11-06 00:00:00
AlmaLinux 8 : libgcrypt (5311) (ALSA-2022:5311)
2022-07-21 00:00:00
nvd
nvd
CVE-2021-40528
2021-09-06 19:15:07
oraclelinux
oraclelinux
libgcrypt security update
2022-07-07 00:00:00
libgcrypt security update
2022-07-01 00:00:00
cve
cve
CVE-2021-40528
2021-09-06 19:15:07
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a cross-configuration attack against OpenPGP (CVE-2021-40528)
2023-01-12 21:59:00
rocky
rocky
libgcrypt security update
2022-06-28 10:51:57
veracode
veracode
Denial Of Service (DoS)
2021-09-08 13:25:34
mageia
mageia
Updated libgcrypt packages fix security vulnerability
2021-09-29 20:22:22
cvelist
cvelist
CVE-2021-40528
2021-09-06 00:00:00
debiancve
debiancve
CVE-2021-40528
2021-09-06 19:15:07
alpinelinux
alpinelinux
CVE-2021-40528
2021-09-06 19:15:07
rosalinux
rosalinux
Advisory ROSA-SA-2023-2316
2023-12-26 11:51:16
redos
redos
ROS-20220125-15
2022-01-25 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2021-0124
2021-10-21 00:00:00
Moderate Photon OS Security Update - PHSA-2022-0473
2022-02-18 00:00:00
Moderate Photon OS Security Update - PHSA-2021-4.0-0124
2021-11-05 00:00:00
prion
prion
Cross site scripting
2021-09-06 19:15:00
redhat
redhat
(RHSA-2022:5311) Moderate: libgcrypt security update
2022-06-28 10:51:57
(RHSA-2022:5699) Moderate: Secondary Scheduler Operator for Red Hat OpenShift 1.0.1 security update
2022-07-28 14:39:39
(RHSA-2022:5704) Moderate: ACS 3.71 enhancement and security update
2022-07-25 21:38:29
ubuntucve
ubuntucve
CVE-2021-40528
2021-09-06 00:00:00
ubuntu
ubuntu
Libgcrypt vulnerabilities
2021-09-16 00:00:00
Libgcrypt vulnerabilities
2021-09-16 00:00:00
gentoo
gentoo
libgcrypt: Multiple Vulnerabilities
2022-10-31 00:00:00
redhatcve
redhatcve
CVE-2021-40528
2021-09-09 19:46:03
cloudfoundry
cloudfoundry
USN-5080-1: Libgcrypt vulnerabilities | Cloud Foundry
2021-10-28 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
57.6%
Related for ALSA-2022:5311