This version fixes a security bug [T8211] which can be used to mount a DoS using ECDH encryption (with NIST, Brainpool, X448, or X25519 curves). Note that GnuPG versions since 2.5.7 are not affected by this bug due to the use of a different encryption API.
| Vendor | Product | Versions |
|---|---|---|
| gnupg | libgcrypt | < 1.12.2, < 1.11.3, < 1.10.4 |
Updated description with new technical details, added patch version 1.12.2, and included new MITRE ATT&CK techniques T8211 and T8208.
Initial creation
