- Vulnerability/
- USN-3689-2
USN-3689-2: Libgcrypt vulnerability
First published: Tue Jun 19 2018(Updated: )
USN-3689-1 fixed a vulnerability in Libgcrypt. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Keegan Ryan discovered that Libgcrypt was susceptible to a side-channel attack. A local attacker could possibly use this attack to recover ECDSA private keys.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libgcrypt11 | <1.5.0-3ubuntu0.8 | 1.5.0-3ubuntu0.8 |
| Ubuntu OpenSSH Client | =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2018-0495
- https://ubuntu.com/security/notices/USN-3692-1
- https://ubuntu.com/security/notices/USN-3692-2
- https://ubuntu.com/security/notices/USN-3689-1
- https://ubuntu.com/security/notices/USN-3850-1
- https://ubuntu.com/security/notices/USN-3850-2
- https://launchpad.net/ubuntu/+source/libgcrypt11/1.5.0-3ubuntu0.8
- https://ubuntu.com/security/notices/USN-3689-2 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-3689-2.
What is the title of the vulnerability?
The title of the vulnerability is 'USN-3689-2: Libgcrypt vulnerability'.
What software is affected by this vulnerability?
The affected software is libgcrypt11 version 1.5.0-3ubuntu0.8 running on Ubuntu 12.04.
How can I fix this vulnerability?
To fix this vulnerability, you should update the libgcrypt11 package to version 1.5.0-3ubuntu0.8 or later.
Where can I find more information about this vulnerability?
More information about this vulnerability can be found at the following references: [CVE-2018-0495](https://ubuntu.com/security/CVE-2018-0495), [USN-3692-1](https://ubuntu.com/security/notices/USN-3692-1), [USN-3692-2](https://ubuntu.com/security/notices/USN-3692-2).
- agent/severity
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu openssh client
- version/ubuntu openssh client/12.04