[Git][security-tracker-team/security-tracker][master] Add references for CVE-2024-2236/libgcrypt

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9f108121 by Salvatore Bonaccorso at 2024-07-28T15:05:08+02:00
Add references for CVE-2024-2236/libgcrypt

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -43612,6 +43612,8 @@ CVE-2024-2236 (A timing-based side-channel flaw was found in libgcrypt's RSA imp
 	NOTE: https://lists.gnupg.org/pipermail/gcrypt-devel/2024-March/005607.html
 	NOTE: https://github.com/tomato42/marvin-toolkit/tree/master/example/libgcrypt
 	NOTE: https://people.redhat.com/~hkario/marvin/
+	NOTE: https://dev.gnupg.org/T7136
+	NOTE: https://gitlab.com/redhat-crypto/libgcrypt/libgcrypt-mirror/-/merge_requests/17
 CVE-2024-1299 (A privilege escalation vulnerability was discovered in GitLab affectin ...)
 	- gitlab 16.8.4-1
 CVE-2024-0199 (An authorization bypass vulnerability was discovered in GitLab affecti ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9f1081213eb1e9bd6e5af1a7e342253fcd8e7401

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9f1081213eb1e9bd6e5af1a7e342253fcd8e7401
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240728/3f79a843/attachment.htm>