Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02773-1

Опубликовано: 13 авг. 2025
Источник: suse-cvrf

Описание

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

  • CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA ciphertexts (bsc#1221107).

Список пакетов

Container suse/sle-micro/5.5/toolbox:latest
libgcrypt20-1.9.4-150500.12.3.3
libgcrypt20-hmac-1.9.4-150500.12.3.3
Container suse/sle-micro/5.5:latest
libgcrypt20-1.9.4-150500.12.3.3
Container suse/sle-micro/base-5.5:latest
libgcrypt20-1.9.4-150500.12.3.3
Container suse/sle-micro/kvm-5.5:latest
libgcrypt20-1.9.4-150500.12.3.3
Container suse/sle-micro/rt-5.5:latest
libgcrypt20-1.9.4-150500.12.3.3
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libgcrypt-cavs-1.9.4-150500.12.3.3
libgcrypt-devel-1.9.4-150500.12.3.3
libgcrypt20-1.9.4-150500.12.3.3
libgcrypt20-32bit-1.9.4-150500.12.3.3
libgcrypt20-hmac-1.9.4-150500.12.3.3
libgcrypt20-hmac-32bit-1.9.4-150500.12.3.3
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libgcrypt-cavs-1.9.4-150500.12.3.3
libgcrypt-devel-1.9.4-150500.12.3.3
libgcrypt20-1.9.4-150500.12.3.3
libgcrypt20-32bit-1.9.4-150500.12.3.3
libgcrypt20-hmac-1.9.4-150500.12.3.3
libgcrypt20-hmac-32bit-1.9.4-150500.12.3.3
SUSE Linux Enterprise Micro 5.5
libgcrypt20-1.9.4-150500.12.3.3
libgcrypt20-hmac-1.9.4-150500.12.3.3
SUSE Linux Enterprise Server 15 SP5-LTSS
libgcrypt-cavs-1.9.4-150500.12.3.3
libgcrypt-devel-1.9.4-150500.12.3.3
libgcrypt20-1.9.4-150500.12.3.3
libgcrypt20-32bit-1.9.4-150500.12.3.3
libgcrypt20-hmac-1.9.4-150500.12.3.3
libgcrypt20-hmac-32bit-1.9.4-150500.12.3.3
SUSE Linux Enterprise Server for SAP Applications 15 SP5
libgcrypt-devel-1.9.4-150500.12.3.3
libgcrypt20-1.9.4-150500.12.3.3
libgcrypt20-32bit-1.9.4-150500.12.3.3
libgcrypt20-hmac-1.9.4-150500.12.3.3
libgcrypt20-hmac-32bit-1.9.4-150500.12.3.3

Ссылки

Описание

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.

Затронутые продукты
Container suse/sle-micro/5.5/toolbox:latest:libgcrypt20-1.9.4-150500.12.3.3
Container suse/sle-micro/5.5/toolbox:latest:libgcrypt20-hmac-1.9.4-150500.12.3.3
Container suse/sle-micro/5.5:latest:libgcrypt20-1.9.4-150500.12.3.3
Container suse/sle-micro/base-5.5:latest:libgcrypt20-1.9.4-150500.12.3.3
Ссылки
Уязвимость SUSE-SU-2025:02773-1