[Announce] Libgcrypt 1.7.8 released to fix CVE-2017-7526
Johan Wevers
johanw at vulcan.xs4all.nl
Tue Jul 4 21:03:50 CEST 2017
On 04-07-2017 18:30, Werner Koch wrote:
>> Is 1.4 vulnerable to this attack as well? I know it ows not use
>> libgcrypt but I'm not sure about the vulnerability.
>
> Maybe. And probably also to a lot of other local side channel attacks.
Is that going to be fixed, or is 1.4 now really considered EOL?
--
ir. J.C.A. Wevers
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html
More information about the Gnupg-users
mailing list