Описание
Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libgcrypt20 | fixed | 1.12.2-1 | package | |
| libgcrypt20 | not-affected | trixie | package | |
| libgcrypt20 | not-affected | bookworm | package | |
| libgcrypt20 | not-affected | bullseye | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/04/21/1
https://dev.gnupg.org/T8208
Introduced with: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=1b422366e2b3b5438713418b50f8a0a1abf8d365 (libgcrypt-1.12.0)
Fixed by: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=905e00f046a71e5670517779afaf85a354952832 (libgcrypt-1.12.2)
Связанные уязвимости
Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.