This script is Copyright (C) 2016 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-201610-04
(libgcrypt: Multiple vulnerabilities)
Multiple vulnerabilities have been discovered in libgcrypt. Please
review the CVE identifiers referenced below for details.
Side-channel attacks can leak private key information. A separate
critical bug allows an attacker who obtains 4640 bits from the RNG to
trivially predict the next 160 bits of output.
There is no known workaround at this time.
See also :
All libgcrypt users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=dev-libs/libgcrypt-1.7.3'
Risk factor :
Medium / CVSS Base Score : 5.0