- Vulnerability/
- USN-3347-2
USN-3347-2: Libgcrypt vulnerability
First published: Mon Jul 17 2017(Updated: )
USN-3347-1 fixed a vulnerability in Libgcrypt. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that Libgcrypt was susceptible to an attack via side channels. A local attacker could use this attack to recover RSA private keys. (CVE-2017-7526)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libgcrypt11 | <1.5.0-3ubuntu0.7 | 1.5.0-3ubuntu0.7 |
| Ubuntu gir1.2-packagekitglib-1.0 | =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2017-7526
- https://ubuntu.com/security/notices/USN-3733-1
- https://ubuntu.com/security/notices/USN-3733-2
- https://ubuntu.com/security/notices/USN-3347-1
- https://launchpad.net/ubuntu/+source/libgcrypt11/1.5.0-3ubuntu0.7
- https://ubuntu.com/security/notices/USN-3347-2 (Advisory)
Frequently Asked Questions
What is the severity of USN-3347-2?
The severity of USN-3347-2 is classified as important due to potential security implications in Libgcrypt.
How do I fix USN-3347-2?
To fix USN-3347-2, update the libgcrypt11 package to version 1.5.0-3ubuntu0.7 or later.
What issue does USN-3347-2 address?
USN-3347-2 addresses a vulnerability in Libgcrypt that may lead to security risks.
Which systems are affected by USN-3347-2?
USN-3347-2 affects Ubuntu 12.04 systems using the libgcrypt11 package.
Is USN-3347-2 applicable to other Ubuntu versions?
No, USN-3347-2 specifically applies to Ubuntu 12.04 ESM and not to other versions.
- agent/references
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/12.04