DirectorySecurity Advisories
Sign In
Security Advisories

CGA-82q7-m5q2-q89f

Published

Last updated

https://images.chainguard.dev/security/CGA-82q7-m5q2-q89f
Package

argo-cd-2.8

Latest Update
Under investigation
Aliases
  • GHSA-9763-4f94-gfch

Summary

CIRCL's Kyber: timing side-channel (kyberslash2)

Description

Impact

On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.

Does not apply to ephemeral usage, such as when used in the regular way in TLS.

Patches

Patched in 1.3.7.

References

  • kyberslash.cr.yp.to

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images