libgcrypt contains an unspecified flaw related to the verification of created RSA signatures, which may allow an attacker to gain access to private key information. No further details have been provided. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5738 https://lists.gnupg.org/pipermail/gnupg-announce/2015q3/000370.html http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=b85c8d6645039fc9d403791750510e439731d479