CVE:CVE-2013-4242
CNNVD:CNNVD-201307-576
GnuPG（GNU Privacy Guard）是GNU计划开发的一套开源的加密软件，采用GNU通用公共许可证，并支持公钥、对称加密、散列等算法。libgcrypt是其中的一个通用加密库。
GnuPG 1.4.13及之前版本，GnuPG 2.0.x版本及其他产品中使用的Libgcrypt 1.5.2及之前版本中存在漏洞。本地攻击者可通过跨频道攻击（side-channel attack）利用该漏洞获取PSA密钥信息。
solution:Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,12.10,13.04,and avoid the version 10.04,12.04,12.10,13.04; Upgrade debian debian_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade gnupg gnupg to a higher version than 1.4.13,0.0.0,0.2.15,0.2.16,0.2.17,0.2.18,0.2.19,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.4.0,0.4.1,0.4.3,0.4.4,0.4.5,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.2.0,1.2.1,1.2.1:windows,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.6,1.3.90,1.3.91,1.3.92,1.3.93,1.4.0,1.4.10,1.4.11,1.4.12,2.0.1,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0.15,2.0.16,2.0.17,2.0.18,2.0.19,and avoid the version (,1.4.13],0.0.0,0.2.15,0.2.16,0.2.17,0.2.18,0.2.19,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.4.0,0.4.1,0.4.3,0.4.4,0.4.5,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.2.0,1.2.1,1.2.1:windows,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.6,1.3.90,1.3.91,1.3.92,1.3.93,1.4.0,1.4.10,1.4.11,1.4.12,2.0.1,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0.15,2.0.16,2.0.17,2.0.18,2.0.19; Upgrade gnupg libgcrypt to a higher version than 1.5.2,1.4.0,1.4.3,1.4.4,1.4.5,1.4.6,1.5.0,1.5.1,and avoid the version (,1.5.2],1.4.0,1.4.3,1.4.4,1.4.5,1.4.6,1.5.0,1.5.1; Upgrade opensuse opensuse to a higher version than 12.2,12.3,and avoid the version 12.2,12.3