USN-3347-2: Libgcrypt vulnerability
USN-3347-1 fixed a vulnerability in Libgcrypt. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that Libgcrypt was susceptible to an attack via side channels. A local attacker could use this attack to recover RSA private keys. (CVE-2017-7526)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-3347-2?
The severity of USN-3347-2 is classified as important due to potential security implications in Libgcrypt.
How do I fix USN-3347-2?
To fix USN-3347-2, update the libgcrypt11 package to version 1.5.0-3ubuntu0.7 or later.
What issue does USN-3347-2 address?
USN-3347-2 addresses a vulnerability in Libgcrypt that may lead to security risks.
Which systems are affected by USN-3347-2?
USN-3347-2 affects Ubuntu 12.04 systems using the libgcrypt11 package.
Is USN-3347-2 applicable to other Ubuntu versions?
No, USN-3347-2 specifically applies to Ubuntu 12.04 ESM and not to other versions.