ALPINE-CVE-2016-6313
ALPINE-CVE-2016-6313
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
CVSS 5.3 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
libgcrypt Alpine:v3.4
- Affected ranges
- ECOSYSTEM: < 1.7.0-r1
Update to 1.7.0-r1