VDB

GCVE-110-MAGEIA-2016-72

GCVE-110-MAGEIA-2016-72
Advisory Published
Vulnetix · Advisory published February 17, 2016
Updated libgcrypt packages fix security vulnerability: Daniel Genkin, Lev Pachmanov, Itamar Pipman and Eran Tromer discovered that the ECDH secret decryption keys in applications using the libgcrypt20 library could be leaked via a side-channel attack (CVE-2015-7511). The libgcrypt package was also updated to include countermeasures against Lenstra's fault attack on RSA Chinese Remainder Theorem optimization in RSA. A signature verification step was updated to protect against leaks of private keys in case of hardware faults or implementation errors in numeric libraries. This issue is equivalent to the CVE-2015-5738 issue in gnupg.

Affected Products

VendorProductVersionsPlatforms
Mageialibgcrypt1.5.4-5.2.mga5 (unaffected), 0 (affected), 1.5.4-5.2.mga5 (unaffected), 0 (affected)
Mageiamicrocode0 (affected), 0.20160409-1.mga5.nonfree (unaffected)

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›