First published: Wed Apr 02 2025(Updated: )
Moderate: libgcrypt security update
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions | ||
Red Hat Enterprise Linux for IBM z Systems | ||
Red Hat Enterprise Linux for x86_64 - Extended Update Support | ||
Red Hat Enterprise Linux for Power, little endian - Extended Update Support | ||
Red Hat Enterprise Linux Server | ||
Red Hat Enterprise Linux for ARM 64 | ||
Red Hat Enterprise Linux Server for IBM z Systems | ||
Red Hat Enterprise Linux for ARM64 EUS | ||
Red Hat Enterprise Linux for SAP Solutions | ||
redhat/libgcrypt | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-debuginfo | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-debuginfo | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-debugsource | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-debugsource | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-devel | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-devel | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-devel-debuginfo | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-devel-debuginfo | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-debuginfo | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-debugsource | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-devel | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt-devel-debuginfo | <1.10.0-10.el9_4.1 | 1.10.0-10.el9_4.1 |
redhat/libgcrypt | <1.10.0-10.el9_4.1.aa | 1.10.0-10.el9_4.1.aa |
redhat/libgcrypt-debuginfo | <1.10.0-10.el9_4.1.aa | 1.10.0-10.el9_4.1.aa |
redhat/libgcrypt-debugsource | <1.10.0-10.el9_4.1.aa | 1.10.0-10.el9_4.1.aa |
redhat/libgcrypt-devel | <1.10.0-10.el9_4.1.aa | 1.10.0-10.el9_4.1.aa |
redhat/libgcrypt-devel-debuginfo | <1.10.0-10.el9_4.1.aa | 1.10.0-10.el9_4.1.aa |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2025:3530 is classified as moderate.
RHSA-2025:3530 addresses a vulnerability in the libgcrypt library related to the Marvin Attack (CVE-2024-2236).
To fix RHSA-2025:3530, you should update libgcrypt to version 1.10.0-10.el9_4.1 or later.
RHSA-2025:3530 affects various versions of Red Hat Enterprise Linux, including both Power LE and x86_64 architectures.
Yes, RHSA-2025:3530 involves a vulnerability that is susceptible to a specific type of attack referred to as the Marvin Attack.