MGASA-2026-0464
- Source
- https://advisories.mageia.org/MGASA-2026-0464.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0464.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2026-0464
- Upstream
- Published
- 2026-10-02T06:40:06Z
- Modified
- 2026-10-02T06:45:02Z
- Summary
- Updated libgcrypt package fixes a security vulnerability
- Details
-
Libgcrypt: vulnerable to marvin attack. (CVE-2024-2236)
- References
-
- https://advisories.mageia.org/MGASA-2026-0464.html
- https://bugs.mageia.org/show_bug.cgi?id=36248
- https://ubuntu.com/security/notices/USN-8711-1
- https://bugzilla.redhat.com/show_bug.cgi?id=2268268
- https://lists.gnupg.org/pipermail/gcrypt-devel/2024-March/005607.html
- https://github.com/tomato42/marvin-toolkit/tree/master/example/libgcrypt
- https://people.redhat.com/~hkario/marvin/
- https://dev.gnupg.org/T7136
- https://gitlab.com/redhat-crypto/libgcrypt/libgcrypt-mirror/-/merge_requests/17
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / libgcrypt
Package
- Name
- libgcrypt
- Purl
- pkg:rpm/mageia/libgcrypt?arch=source&distro=mageia-10