Race Condition

Affecting libgcrypt20 package, versions <1.8.1-4ubuntu1.2

Overview

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.

References

• ADVISORY
• Debian Security Announcement
• Debian Security Announcement
• Debian Security Tracker
• Gentoo Security Advisory
• GitHub Release
• MISC
• OSS security Advisory
• OpenSuse Security Announcement
• OpenSuse Security Announcement
• Ubuntu CVE Tracker
• Ubuntu Security Advisory
• Ubuntu Security Advisory
• Ubuntu Security Advisory