{"id":"CVE-2014-3591","aliases":["AZL-41815","CLSA-2023-1698945053","CLSA-2026-1782731604","DEBIAN-CVE-2014-3591","DLA-175-1","DLA-190-1","DSA-3184-1","DSA-3185-1","EUVD-2014-3565","GHSA-5p8v-2xvp-pwmc","MGASA-2015-0104","SUSE-SU-2015:1179-1","SUSE-SU-2015:1626-1","UBUNTU-CVE-2014-3591","USN-2554-1","USN-2555-1","openSUSE-SU-2024:10037-1"],"status":"published","title":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal...","description":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.","severity":{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.006,"percentile":0.48977,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2014-12-31T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"grub2","fixed_in":["2.06-25"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libgcrypt20","fixed_in":["1.6.3-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgcrypt20","fixed_in":["1.6.3-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgcrypt20","fixed_in":["1.6.3-2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libgcrypt","fixed_in":["1.6.1-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libgcrypt","fixed_in":["1.6.1-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"libgcrypt","fixed_in":["1.6.1-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libgcrypt","fixed_in":["1.6.1-13.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"gnupg","fixed_in":["1.4.16-1ubuntu2.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","fixed_in":["1.5.3-2ubuntu4.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt20","fixed_in":["1.6.1-2ubuntu1.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-25"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-14.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libgcrypt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-14.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-14.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libgcrypt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-14.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-2"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.10-4+squeeze7"}]}],"versions":["1.4.10-4","1.4.10-4+squeeze1","1.4.10-4+squeeze2","1.4.10-4+squeeze3","1.4.10-4+squeeze4","1.4.10-4+squeeze5","1.4.10-4+squeeze6"],"bundled":3},{"source":"osv","ecosystem":"Debian:6.0","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-2+squeeze3"}]}],"versions":["1.4.5-2","1.4.5-2+squeeze1","1.4.5-2+squeeze2"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.12-7+deb7u7"}]}],"versions":["1.4.12-7","1.4.12-7+deb7u1","1.4.12-7+deb7u2","1.4.12-7+deb7u3","1.4.12-7+deb7u4","1.4.12-7+deb7u5","1.4.12-7+deb7u6"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-5+deb7u3"}]}],"versions":["1.5.0-5","1.5.0-5+deb7u1","1.5.0-5+deb7u2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.16-1.2.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.1.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.16-1ubuntu2.3"}]}],"versions":["1.4.14-1ubuntu2","1.4.15-1.1ubuntu1","1.4.15-1.1ubuntu2","1.4.15-2ubuntu1","1.4.16-1ubuntu1","1.4.16-1ubuntu2","1.4.16-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-2ubuntu4.2"}]}],"versions":["1.5.0-3ubuntu3","1.5.3-2ubuntu1","1.5.3-2ubuntu4","1.5.3-2ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-2ubuntu1.14.04.1"}]}],"versions":["1.6.0-2","1.6.0-2ubuntu2","1.6.1-1","1.6.1-2","1.6.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.16-1ubuntu2.3"}]}],"versions":["1.4.14-1ubuntu2","1.4.15-1.1ubuntu1","1.4.15-1.1ubuntu2","1.4.15-2ubuntu1","1.4.16-1ubuntu1","1.4.16-1ubuntu2","1.4.16-1ubuntu2.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-3ubuntu1.3"}]}],"versions":["2.0.20-1ubuntu3","2.0.22-1ubuntu1","2.0.22-3ubuntu1","2.0.22-3ubuntu1.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-2ubuntu4.2"}]}],"versions":["1.5.0-3ubuntu3","1.5.3-2ubuntu1","1.5.3-2ubuntu4","1.5.3-2ubuntu4.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-1.3"}]}],"bundled":6}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnu","product":"gnupg"},{"vendor":"gnu","product":"libgcrypt"},{"vendor":"gnupg","product":"gnupg"},{"vendor":"gnupg","product":"libgcrypt"}],"references":[{"url":"http://www.cs.tau.ac.il/~tromer/radioexp/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html","tags":["x_refsource_MISC","x_transferred","Patch","Release Notes","Vendor Advisory","advisory","fix","web","report"]},{"url":"https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"http://www.debian.org/security/2015/dsa-3184","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3185","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3591","tags":["web"]},{"url":"https://github.com/advisories/GHSA-5p8v-2xvp-pwmc"},{"url":"https://errata.cloudlinux.com/centos7-els/CLSA-2023-1698945053.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1782731604.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33560","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3591","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0104.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15441","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2015-March/150931.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151179-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/896202","tags":["report"]},{"url":"https://bugzilla.suse.com/896435","tags":["report"]},{"url":"https://bugzilla.suse.com/898003","tags":["report"]},{"url":"https://bugzilla.suse.com/899524","tags":["report"]},{"url":"https://bugzilla.suse.com/900275","tags":["report"]},{"url":"https://bugzilla.suse.com/900276","tags":["report"]},{"url":"https://bugzilla.suse.com/905483","tags":["report"]},{"url":"https://bugzilla.suse.com/920057","tags":["report"]},{"url":"https://bugzilla.suse.com/928740","tags":["report"]},{"url":"https://bugzilla.suse.com/929919","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3591","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151626-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0837","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-3591","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2554-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2555-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-5270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0837","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1607","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6313","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-3591","description":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.","status":"published","published":"2019-11-29T21:02:23Z","modified":"2024-08-06T10:50:17.627Z","updated_at":"2026-11-02T14:33:44.23164Z"}],"euvd":[{"id":"EUVD-2014-3565","description":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.","status":"published","published":"2019-11-29T21:02:23Z","modified":"2024-08-06T10:50:17Z","updated_at":"2026-11-03T01:57:10.446744Z"}],"ghsa":[{"id":"GHSA-5p8v-2xvp-pwmc","title":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal...","description":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.","status":"published","published":"2022-05-17T19:57:06Z","modified":"2023-01-28T05:04:48Z","updated_at":"2026-11-02T14:44:14.607752Z"}],"nvd":[{"id":"CVE-2014-3591","description":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.","status":"published","published":"2019-11-29T22:15:11.703Z","modified":"2026-06-17T00:08:34.86Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:59.461996Z"}],"osv":[{"id":"AZL-41815","title":"CVE-2014-3591 affecting package grub2 for versions less than 2.06-25","description":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.","status":"published","published":"2019-11-29T22:15:11Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"CVE-2014-3591","description":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.","status":"published","published":"2019-11-29T22:15:11Z","modified":"2026-04-16T06:16:53.433250116Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3591","description":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.","status":"published","published":"2019-11-29T22:15:11.703Z","modified":"2026-10-23T16:00:34.545812448Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"UBUNTU-CVE-2014-3591","description":"Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.","status":"published","published":"2014-12-31T00:00:00Z","modified":"2026-04-22T09:41:40.933256Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"CLSA-2023-1698945053","title":"libgcrypt: Fix of 4 CVEs","description":"- CVE-2013-4576: Normalize the MPIs to prevent possible side-channel\n  attacks\n- CVE-2014-3591: Use ciphertext blinding for Elgamal to prevent\n  possible side-channel attacks\n- CVE-2021-33560: Use of smaller K for ephemeral key in ElGamal\n  prevent generation of weak keys\n- CVE-2021-40528: Add exponent blinding as well to mitigate\n  side-channel attack on mpi_powm\n- tests: Add a benchmark for Elgamal","status":"published","published":"2023-11-02T17:10:57Z","modified":"2026-06-01T00:33:17.284256741Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2026-1782731604","title":"libgcrypt: Fix of CVE-2021-33560","description":"- CVE-2013-4576: Normalize the MPIs to prevent possible side-channel\n  attacks\n- CVE-2014-3591: Use ciphertext blinding for Elgamal to prevent\n  possible side-channel attacks\n- CVE-2021-33560: Use of smaller K for ephemeral key in ElGamal\n  prevent generation of weak keys\n- CVE-2021-40528: Add exponent blinding as well to mitigate\n  side-channel attack on mpi_powm\n- tests: Add a benchmark for Elgamal","status":"published","published":"2026-06-29T11:13:40Z","modified":"2026-10-26T09:43:35.904800852Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"DLA-175-1","title":"gnupg - security update","status":"published","published":"2015-03-17T00:00:00Z","modified":"2026-03-09T01:18:18.863158Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-190-1","title":"libgcrypt11 - security update","status":"published","published":"2015-04-09T00:00:00Z","modified":"2026-03-09T01:18:28.336994Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-3184-1","title":"gnupg - security update","status":"published","published":"2015-03-12T00:00:00Z","modified":"2026-03-09T01:19:53.787841Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3185-1","title":"libgcrypt11 - security update","status":"published","published":"2015-03-12T00:00:00Z","modified":"2026-03-09T01:19:59.058518Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0104","title":"Updated gnupg and libgcrypt packages fix security vulnerabilities","description":"GnuPG before 1.4.19 is vulnerable to a side-channel attack which can\npotentially lead to an information leak (CVE-2014-3591).\n\nGnuPG before 1.4.19 is vulnerable to a side-channel attack on data-dependent\ntiming variations in modular exponentiation, which can potentially lead to an\ninformation leak (CVE-2015-0837).\n\nThe gnupg package has been patched to correct these issues.\n\nGnuPG2 is vulnerable to these issues through the libgcrypt library.  The\nissues were fixed in libgcrypt 1.6.3.  The libgcrypt package in Mageia,\nat version 1.5.4, was only vulnerable to the CVE-2014-3591 issue.  It has\nalso been patched to correct this issue.\n","status":"published","published":"2015-03-10T16:48:25Z","modified":"2026-04-16T06:23:02.86310038Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10037-1","title":"libgcrypt-cavs-1.7.3-1.3 on GA media","description":"These are all security issues fixed in the libgcrypt-cavs-1.7.3-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:03.046041Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2015:1179-1","title":"Security update for libgcrypt","description":"\nThis update of libgcrypt fixes one security issue and brings various FIPS 140-2 related improvements.\n\nlibgcrypt now uses ciphertext blinding for Elgamal decryption (CVE-2014-3591)\n\nFIPS 140-2 related changes:\n* The library performs its self-tests when the module is complete (the -hmac file is also installed).\n\n* Added a NIST 800-90a compliant DRBG.\n\n* Change DSA key generation to be FIPS 186-4 compliant.\n\n* Change RSA key generation to be FIPS 186-4 compliant.\n\n* Enable HW support in fips mode (bnc#896435)\n\n* Make DSA selftest use 2048 bit keys (bnc#898003)\n\n* Added ECDSA selftests and add support for it to the CAVS testing\n  framework (bnc#896202)\n\n* Various CAVS testing improvements.\n","status":"published","published":"2015-06-11T13:44:58Z","modified":"2025-05-02T04:04:05.846668Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1626-1","title":"Security update for libgcrypt","description":"\nThis update fixes the following issues:\n\n* Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].\n  See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.\n  (bsc#920057)\n* Fixed data-dependent timing variations in modular exponentiation\n  [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks\n  are Practical]\n","status":"published","published":"2015-08-17T08:27:45Z","modified":"2025-05-02T04:04:05.906382Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"USN-2554-1","title":"gnupg, gnupg2 vulnerabilities","description":"Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered\nthat GnuPG was susceptible to an attack via physical side channels. A local\nattacker could use this attack to possibly recover private keys.\n(CVE-2014-3591)\n\nDaniel Genkin, Adi Shamir, and Eran Tromer discovered that GnuPG was\nsusceptible to an attack via physical side channels. A local attacker could\nuse this attack to possibly recover private keys. (CVE-2015-0837)\n\nHanno Böck discovered that GnuPG incorrectly handled certain malformed\nkeyrings. If a user or automated system were tricked into opening a\nmalformed keyring, a remote attacker could use this issue to cause GnuPG to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2015-1606, CVE-2015-1607)\n\nIn addition, this update improves GnuPG security by validating that the\nkeys returned by keyservers match those requested.\n","status":"published","published":"2015-04-01T13:23:13Z","modified":"2026-02-10T04:40:53Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2555-1","title":"libgcrypt11, libgcrypt20 vulnerabilities","description":"Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered\nthat Libgcrypt was susceptible to an attack via physical side channels. A\nlocal attacker could use this attack to possibly recover private keys.\n(CVE-2014-3591)\n\nDaniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcrypt was\nsusceptible to an attack via physical side channels. A local attacker could\nuse this attack to possibly recover private keys. (CVE-2015-0837)\n","status":"published","published":"2015-04-01T13:28:51Z","modified":"2026-04-22T09:10:39.290222Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}