CVE-2021-40528
MediumAdvisory
Published 25 Jun 2021In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.014
- 71st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 859
- of 17,787 indexed, latest versions
- Container images
- 746
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: libgcrypt security update
Carried by container images the latest versions of 859 of 17,787 indexed charts deploy, on 746 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libgcrypt20deb | 1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+10 more | 1.6.5-2ubuntu0.6+esm1, 1.7.6-2+deb9u4, 1.8.1-4ubuntu1.3, 1.8.1-4ubuntu1.fips.3+2 more | 627 |
| libgcryptrpm | 1.8.2-lp151.9.4.1, 1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8+1 more | 0:1.8.5-7.el8_6, 1.10.1-1.1 | 71 |
| libgcryptapk | 1.8.5-r0, 1.8.7-r0, 1.8.8-r0 | 1.8.8-r1 | 48 |
- OSV records
- ALPINE-CVE-2021-40528RHSA-2022:5311UBUNTU-CVE-2021-40528DLA-2691-1openSUSE-SU-2024:12540-1
- Also known as
- USN-5080-1, USN-5080-2
Charts affected
859 by stars
Container images carrying it
746 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| owncloud/ | 51d9b74fc2a8 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| owntracks/ | 48cbbb64f347 | libgcrypt | 1.8.8-r1 | 1 |
| oxfordsemantic/ | db17910eb855 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| oxfordsemantic/ | baf570ff968d | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| pachyderm/ | 94e9a281e5a4 | libgcrypt20 | 1.7.6-2+deb9u4 | 1 |
| pachyderm/ | 2b27f41d4d02 | libgcrypt20 | 1.7.6-2+deb9u4 | 1 |
| pedrocesarti/ | 14851f144f57 | libgcrypt20 | 1.7.6-2+deb9u4 | 1 |
| phntom/ | 0c75ed6dd606 | libgcrypt | 1.8.8-r1 | 1 |
| pihole/ | 8c172c4cf344 | libgcrypt20 | 1.7.6-2+deb9u4 | 1 |
| platform9community/ | de3fa9b70df1 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| platform9community/ | 40a4970de568 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| platform9community/ | 2089811e5cc6 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| platform9community/ | d1165c94dfb3 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| platform9community/ | 8d11b50368c6 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| plexinc/ | 46ea59b96f2b | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| plexinc/ | b598abb134ad | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| pnnlmiscscripts/ | bbb6940d849f | libgcrypt | 1.8.8-r1 | 1 |
| pnnlmiscscripts/ | 155131891741 | libgcrypt | 0:1.8.5-7.el8_6 | 1 |
| pnnlmiscscripts/ | 03b3fed5bdbc | libgcrypt | 1.8.8-r1 | 1 |
| pnnlmiscscripts/ | 8af4c559fff0 | libgcrypt | 1.8.8-r1 | 1 |
| pnnlmiscscripts/ | d710d31000ce | libgcrypt | 1.8.8-r1 | 1 |
| pozetroninc/ | 53ae64f29da8 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| pposkrobko/ | eaf260341dba | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| project2team4/ | 3ff031a08887 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| psorab/ | 53b68896c4ce | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| ptthanh1511/ | 5741cbde85ab | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| puppet/ | 0b6fd9a6b7da | libgcrypt20 | 1.8.1-4ubuntu1.fips.3 | 1 |
| radondb/ | 4732df471073 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| rakii8585/ | 026082a515ac | libgcrypt20 | 1.7.6-2+deb9u4 | 1 |
| rancher/ | e66f32d19eb9 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| raykrueger/ | c8baf3de57bb | libgcrypt20 | 1.7.6-2+deb9u4 | 1 |
| redis/ | 51a58f32d412 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| rezachalak/ | 34f694325191 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| richardchesterwood/ | 0b540a28f5a6 | libgcrypt20 | 1.7.6-2+deb9u4 | 1 |
| richardchesterwood/ | 36c43961214c | libgcrypt20 | 1.7.6-2+deb9u4 | 1 |
| rm3l/ | 62d1cc4223e5 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| robotshop/ | 119b545823cd | libgcrypt20 | 1.8.5-5ubuntu1.1 | 1 |
| royalwang/ | df99e2499f91 | libgcrypt20 | 1.7.6-2+deb9u4 | 1 |
| rundeck/ | 4d64fe56f767 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| rundeck/ | b13e8059ad72 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| saiakhil46/ | dc39ce11e5d0 | libgcrypt | 1.8.8-r1 | 1 |
| scrapinghub/ | a5f89bc84606 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| seafileltd/ | 6693911bcc40 | libgcrypt20 | 1.8.5-5ubuntu1.1 | 1 |
| seafileltd/ | 70628f29c663 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| seafileltd/ | 7ac833196f60 | libgcrypt20 | 1.8.5-5ubuntu1.1 | 1 |
| seafileltd/ | ed0fcda5e6a9 | libgcrypt20 | 1.8.5-5ubuntu1.1 | 1 |
| searx/ | 3dbb3a6d9419 | libgcrypt | 1.8.8-r1 | 1 |
| seldonio/ | 1d0da98a2d76 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| seldonio/ | 4e985d2006a8 | libgcrypt | 0:1.8.5-7.el8_6 | 1 |
| shenxn/ | acf31af7c111 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |