[CLSA-2026:1793167609] libgcrypt: Fix of CVE-2021-33560
Type:
security
Severity:
Important
Release date:
2026-10-28 06:06:58 UTC
Description:
- CVE-2014-3591: use ciphertext blinding for Elgamal decryption (prerequisite for CVE-2021-33560) - CVE-2021-33560: add exponent blinding to Elgamal decryption to mitigate side-channel attack on mpi_powm, and always use a full-size ephemeral k in Elgamal encryption
CVEs fixed:
Updated packages:
  • libgcrypt-1.4.5-12.el6_8.tuxcare.els1.i686.rpm
    sha:3dfa1e6fb6fe3a2a9f8016e66b6cea06cbbb5005663d8e34af17711ab29323f1
  • libgcrypt-1.4.5-12.el6_8.tuxcare.els1.x86_64.rpm
    sha:8127f0bdf5f7cb9081747a89c7fddd13b76de5c4ffcb9c6bcb3499c0e1b43e84
  • libgcrypt-devel-1.4.5-12.el6_8.tuxcare.els1.i686.rpm
    sha:562e212e6ad81901dfaebdeca000a8a284d6de685480e0f608c0fa56fa40bfa8
  • libgcrypt-devel-1.4.5-12.el6_8.tuxcare.els1.x86_64.rpm
    sha:15f9fa301075a41fff6daf73ba365fe95905fbe49a44adad2fe20d07f1233ca4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.