<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 17:15:09 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-2236 — Libgcrypt: vulnerable to marvin attack</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-2236</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; libgcrypt, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8&lt;/p&gt;
&lt;p&gt;A timing-based side-channel flaw was found in libgcrypt&amp;#39;s RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; libgcrypt, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8&lt;/p&gt;
&lt;p&gt;A timing-based side-channel flaw was found in libgcrypt&amp;#39;s RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-2236</guid>
    </item>
    <item>
      <title>USN-8711-1 — libgcrypt20 vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/usn-8711-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: libgcrypt20, Ubuntu:24.04:LTS: libgcrypt20, Ubuntu:26.04:LTS: libgcrypt20&lt;/p&gt;
&lt;p&gt;It was discovered that Libgcrypt had a timing-based side-channel flaw in
its RSA implementation. A remote attacker could possibly use this issue to
obtain sensitive information.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: libgcrypt20, Ubuntu:24.04:LTS: libgcrypt20, Ubuntu:26.04:LTS: libgcrypt20&lt;/p&gt;
&lt;p&gt;It was discovered that Libgcrypt had a timing-based side-channel flaw in
its RSA implementation. A remote attacker could possibly use this issue to
obtain sensitive information.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-8711-1</guid>
    </item>
  </channel>
</rss>
