libgcrypt-1.8.5-7.el8

The libgcrypt library provides general-purpose implementations of various
cryptographic algorithms.

Security Fix(es):

* libgcrypt: ElGamal implementation allows plaintext recovery (CVE-2021-40528)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2021-40528
The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery
because, during interaction between two cryptographic libraries, a certain
dangerous combination of the prime defined by the receiver's public key, the
generator defined by the receiver's public key, and the sender's ephemeral
exponents can lead to a cross-configuration attack against OpenPGP.