Page MenuHome GnuPG
Create Task
Maniphest T5275

Exploitable overflow in Libgcrypt 1.9.0
Closed, ResolvedPublic
Actions

Description

There is a severe bug in Libgcrypt 1.9.0 released last week (T4294).
Do not use 1.9.0 but wait for 1.9.1 (T5259).

The bug was introduced with commit rCe76617cbab in March 2019 but no version except for 1.9.0 has ever been released with it. The fix included in 1.9.1 is commit rC512c0c7527

Details

External Link
https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html
Version
1.9.0

Related Objects
Search...

Event Timeline

• werner created this task.Jan 29 2021, 10:13 AM
• werner added a subtask: T5259: Release Libgcrypt 1.9.1.
• werner mentioned this in T5259: Release Libgcrypt 1.9.1.Jan 29 2021, 11:24 AM
• werner changed the status of subtask T5259: Release Libgcrypt 1.9.1 from Open to Testing.
• werner changed the task status from Open to Testing.Jan 29 2021, 11:27 AM

Fix has been released. Keeping this in testing state for easier visibility of this task.

• werner updated the task description. (Show Details)Jan 29 2021, 12:34 PM
• werner changed External Link from https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000455.html to https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html.
thesamesam added a subscriber: thesamesam.Jan 30 2021, 12:20 PM
jstein added a subscriber: jstein.Jan 30 2021, 11:08 PM
• werner closed this task as Resolved.Feb 3 2021, 8:07 AM
• werner claimed this task.
• werner closed subtask T5259: Release Libgcrypt 1.9.1 as Resolved.Feb 12 2021, 12:34 PM