CLSA-2026-1782731604

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1782731604.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1782731604
Upstream
CVE (4)
Published
2026-06-29T11:13:40Z
Modified
2026-10-26T09:43:35Z
Summary
libgcrypt: Fix of CVE-2021-33560
Details
  • CVE-2013-4576: Normalize the MPIs to prevent possible side-channel attacks
  • CVE-2014-3591: Use ciphertext blinding for Elgamal to prevent possible side-channel attacks
  • CVE-2021-33560: Use of smaller K for ephemeral key in ElGamal prevent generation of weak keys
  • CVE-2021-40528: Add exponent blinding as well to mitigate side-channel attack on mpi_powm
  • tests: Add a benchmark for Elgamal
References

Affected packages

TuxCare:OracleLinux:7 / libgcrypt

Package

Name
libgcrypt
Purl
pkg:rpm/tuxcare/libgcrypt?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.5.3-14.el7.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1782731604.json"

TuxCare:OracleLinux:7 / libgcrypt-devel

Package

Name
libgcrypt-devel
Purl
pkg:rpm/tuxcare/libgcrypt-devel?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.5.3-14.el7.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1782731604.json"