https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:15:47 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2017-9526 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-9526 https://cve.radiocsirt.org/vuln/cnvd-2017-10541 cnvd-2017-10541 https://cve.radiocsirt.org/vuln/cnvd-2017-10541 https://cve.radiocsirt.org/vuln/euvd-2026-75932 EUVD-2026-75932 https://cve.radiocsirt.org/vuln/euvd-2026-75932 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9526 <p>In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library.</p> <p>In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9526 https://cve.radiocsirt.org/vuln/ghsa-665h-28h9-qh6v <p>In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library.</p> <p>In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library.</p> https://cve.radiocsirt.org/vuln/ghsa-665h-28h9-qh6v https://cve.radiocsirt.org/vuln/gsd-2017-9526 gsd-2017-9526 https://cve.radiocsirt.org/vuln/gsd-2017-9526 https://cve.radiocsirt.org/vuln/suse-su-2017:1608-1 <p>Security update for libgcrypt</p> <p>Security update for libgcrypt</p> https://cve.radiocsirt.org/vuln/suse-su-2017:1608-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9526 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libgcrypt20</p> <p>In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libgcrypt20</p> <p>In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9526