CVE:CVE-2021-40530
CNNVD:CNNVD-202109-278
Crypto++是一款C++加密方法类库
Crypto++ 8.5及之前版本存在安全漏洞，该漏洞源于由接收方公钥定义的素数、由接收方公钥定义的生成器和发送方的临时指数的某种危险组合可能导致针对 OpenPGP 的交叉配置攻击。
solution:Upgrade cryptopp crypto++ to a higher version than 8.5,and avoid the version (,8.5]; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35