VDB
GCVE-110-MAGEIA-2016-72
GCVE-110-MAGEIA-2016-72
Advisory Published
Updated libgcrypt packages fix security vulnerability:
Daniel Genkin, Lev Pachmanov, Itamar Pipman and Eran Tromer discovered that
the ECDH secret decryption keys in applications using the libgcrypt20 library
could be leaked via a side-channel attack (CVE-2015-7511).
The libgcrypt package was also updated to include countermeasures against
Lenstra's fault attack on RSA Chinese Remainder Theorem optimization in RSA.
A signature verification step was updated to protect against leaks of private
keys in case of hardware faults or implementation errors in numeric
libraries. This issue is equivalent to the CVE-2015-5738 issue in gnupg.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | libgcrypt | 1.5.4-5.2.mga5 (unaffected), 0 (affected), 1.5.4-5.2.mga5 (unaffected), 0 (affected) | — |
| Mageia | microcode | 0 (affected), 0.20160409-1.mga5.nonfree (unaffected) | — |
Aliases
References
Browse GCVE Records
73,738 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.