Libgcrypt Security Update: Fixes ECDH Buffer Overflow and Dilithium Missing Boundary Checks

Vulnerability Overview Libgcrypt versions 1.12.2, 1.11.3, and 1.10.4 have fixed the following security vulnerabilities: 1. ECDH Buffer Overflow ([T8211]): - Fixed an issue where the ECDH buffer could be overwritten with zeros. 2. Missing Boundary Check in Dilithium Signature Algorithm ([T8208]): - Fixed the lack of boundary checks in the Dilithium signature algorithm. 3. Missing Point Validation in New KEM Interface ([T8212]): - Fixed the absence of point validation when using the new KEM interface. Impact Scope ECDH Buffer Overflow: Affects all versions that use ECDH encryption. Missing Boundary Check in Dilithium Signature Algorithm: Affects versions that use the Dilithium signature algorithm. Missing Point Validation in New KEM Interface: Affects versions that use the new KEM interface. Remediation ECDH Buffer Overflow: - Fixed the issue where the ECDH buffer could be overwritten with zeros. Missing Boundary Check in Dilithium Signature Algorithm: - Fixed the lack of boundary checks in the Dilithium signature algorithm. Missing Point Validation in New KEM Interface: - Fixed the absence of point validation when using the new KEM interface. Other Fixes Dead Code in RSA’s stronger_key_check ([T8171]): - Fixed the dead code issue in RSA’s stronger_key_check. HAVE_BROKEN_MLOCK Handling ([T7889]): - Fixed the handling of HAVE_BROKEN_MLOCK when building with ASAN. Stack Overflow Crash ([T7633]): - Fixed the stack overflow crash of mceliece6688128F on Windows. Other Fixes: - Replaced with on Windows. - Used secure MPI in . - Fixed a regression issue when public key algorithms are disabled. Download and Verification Download Links: - Source code is hosted on the GnuPG FTP server and its mirrors. - Provides download links for tar.bz2 and tar.gz compressed files. Verification Methods: - Verify signatures using GnuPG. - Verify file integrity using SHA1 checksums. Summary Libgcrypt versions 1.12.2, 1.11.3, and 1.10.4 have fixed multiple security vulnerabilities, including ECDH buffer overflow, missing boundary check in the Dilithium signature algorithm, and missing point validation in the new KEM interface. Users are advised to upgrade to the latest version as soon as possible to ensure security.

Goal Reached Thanks to every supporter — we hit 100%!

Libgcrypt Security Update: Fixes ECDH Buffer Overflow and Dilithium Missing Boundary Checks