ELSA-2021-4409.json

{
  "Title": "ELSA-2021-4409:  libgcrypt security and bug fix update (MODERATE)",
  "Description": "[1.8.5-6]\n- Fix for CVE-2021-33560 (#1971421)\n- Enable HW optimizations in FIPS (#1976137)\n- Performance enchancements for ChaCha20 and Poly1305 (#1855231)\n\n[1.8.5-5]\n- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)",
  "Platform": [
    "Oracle Linux 8"
  ],
  "References": [
    {
      "Source": "elsa",
      "URI": "https://linux.oracle.com/errata/ELSA-2021-4409.html",
      "ID": "ELSA-2021-4409"
    },
    {
      "Source": "CVE",
      "URI": "https://linux.oracle.com/cve/CVE-2021-33560.html",
      "ID": "CVE-2021-33560"
    }
  ],
  "Criteria": {
    "Operator": "AND",
    "Criterias": [
      {
        "Operator": "OR",
        "Criterias": [
          {
            "Operator": "AND",
            "Criterias": [
              {
                "Operator": "OR",
                "Criterias": [
                  {
                    "Operator": "AND",
                    "Criterias": null,
                    "Criterions": [
                      {
                        "Comment": "libgcrypt is earlier than 0:1.8.5-6.el8"
                      },
                      {
                        "Comment": "libgcrypt is signed with the Oracle Linux 8 key"
                      }
                    ]
                  },
                  {
                    "Operator": "AND",
                    "Criterias": null,
                    "Criterions": [
                      {
                        "Comment": "libgcrypt-devel is earlier than 0:1.8.5-6.el8"
                      },
                      {
                        "Comment": "libgcrypt-devel is signed with the Oracle Linux 8 key"
                      }
                    ]
                  }
                ],
                "Criterions": null
              }
            ],
            "Criterions": [
              {
                "Comment": "Oracle Linux arch is aarch64"
              }
            ]
          },
          {
            "Operator": "AND",
            "Criterias": [
              {
                "Operator": "OR",
                "Criterias": [
                  {
                    "Operator": "AND",
                    "Criterias": null,
                    "Criterions": [
                      {
                        "Comment": "libgcrypt is earlier than 0:1.8.5-6.el8"
                      },
                      {
                        "Comment": "libgcrypt is signed with the Oracle Linux 8 key"
                      }
                    ]
                  },
                  {
                    "Operator": "AND",
                    "Criterias": null,
                    "Criterions": [
                      {
                        "Comment": "libgcrypt-devel is earlier than 0:1.8.5-6.el8"
                      },
                      {
                        "Comment": "libgcrypt-devel is signed with the Oracle Linux 8 key"
                      }
                    ]
                  }
                ],
                "Criterions": null
              }
            ],
            "Criterions": [
              {
                "Comment": "Oracle Linux arch is x86_64"
              }
            ]
          }
        ],
        "Criterions": null
      }
    ],
    "Criterions": [
      {
        "Comment": "Oracle Linux 8 is installed"
      }
    ]
  },
  "Severity": "MODERATE",
  "Cves": [
    {
      "Impact": "",
      "Href": "https://linux.oracle.com/cve/CVE-2021-33560.html",
      "ID": "CVE-2021-33560"
    }
  ],
  "Issued": {
    "Date": "2021-11-16"
  }
}