View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-7526 severity low: SUSE including 321 source package names (0.9.1:libgcrypt20-1.6.1-16.42.1, 1.0.0:libgcrypt20-1.6.1-16.42.1, …), 387 product×package rows across 80 product lines (Container caasp/v4/default-http-backend, Container caasp/v4/dnsmasq-nanny, … (80 product lines)): Fixed 230, Known Affected 157.
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.