Branch p8 update bulletin.

Package libgcrypt updated to version 1.6.6-alt1 for branch p8 in task 168656.

Published: 2016-08-17

BDU:2019-01635

Уязвимость генератора псевдослучайных чисел библиотеки криптографии Libgcrypt, связанная с раскрытием информации, позволяющая нарушителю прогнозировать выходные данные

Severity: MEDIUM (5.3) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References:

CVE-2016-6313

Published: 2016-12-13
Modified: 2024-11-21

CVE-2016-6313

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.

Severity: MEDIUM (5.3) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References:

Version: 2.1.1

Branch p8 update on 2016-08-20

ALT-BU-2016-2940-1

ALT-PU-2016-1865-1

Closed vulnerabilities

BDU:2019-01635

CVE-2016-6313