Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-6313

Fixed in a distro release EPSS 4%

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.

Published 2016-12-13 · CVE record · OSV

Products: gnupg libgcrypt, debian_linux, canonical ubuntu_linux, gnupg

Distro releases

ReleasePackageFixed in
Alpine 3.4libgcrypt1.7.0-r1
Debian 12gnupg11.4.21-1
Debian 12libgcrypt201.7.3-1
Debian 13gnupg11.4.21-1
Debian 13libgcrypt201.7.3-1
Debian 14gnupg11.4.21-1
Debian 14libgcrypt201.7.3-1
Debian 7gnupg1.4.12-7+deb7u8
Debian 7libgcrypt111.5.0-5+deb7u5
Debian 8gnupg1.4.18-7+deb8u2
Debian 8libgcrypt201.6.3-2+deb8u2
Red Hat Enterprise Linux 6libgcrypt0:1.4.5-12.el6_8
Red Hat Enterprise Linux 6libgcrypt-debuginfo0:1.4.5-12.el6_8
Red Hat Enterprise Linux 6libgcrypt-devel0:1.4.5-12.el6_8
Red Hat Enterprise Linux 7libgcrypt0:1.5.3-13.el7_3.1
Red Hat Enterprise Linux 7libgcrypt-debuginfo0:1.5.3-13.el7_3.1
Red Hat Enterprise Linux 7libgcrypt-devel0:1.5.3-13.el7_3.1
SUSE Linux Enterprise Desktop 12 SP1libgcrypt1.6.1-16.33.1
SUSE Linux Enterprise Server 11 SP4libgcrypt1.5.0-0.22.1
SUSE Linux Enterprise Server 12 SP1libgcrypt1.6.1-16.33.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libgcrypt1.5.0-0.22.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1libgcrypt1.6.1-16.33.1
SUSE Linux Enterprise Software Development Kit 11 SP4libgcrypt1.5.0-0.22.1
SUSE Linux Enterprise Software Development Kit 12 SP1libgcrypt1.6.1-16.33.1
Ubuntu 14.04 LTSgnupg1.4.16-1ubuntu2.4
Ubuntu 14.04 LTSlibgcrypt111.5.3-2ubuntu4.4
Ubuntu 16.04 LTSgnupg1.4.20-1ubuntu3.1
Ubuntu 16.04 LTSlibgcrypt201.6.5-2ubuntu0.2
openSUSE Tumbleweedlibgcrypt1.7.3-1.3