SUSE-SU-2025:02447-1

Опубликовано: 21 июл. 2025

Источник: suse-cvrf

Описание

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

CVE-2024-2236: Fixed timing based side-channel in RSA implementation. (bsc#1221107)

Список пакетов

Container bci/bci-init:15.6

libgcrypt20-1.10.3-150600.3.9.1

Container bci/bci-minimal:15.6

libgcrypt20-1.10.3-150600.3.9.1

Container bci/bci-sle15-kernel-module-devel:15.6

libgcrypt20-1.10.3-150600.3.9.1

Container bci/node:20

libgcrypt20-1.10.3-150600.3.9.1

Container bci/python:3

libgcrypt20-1.10.3-150600.3.9.1

Container bci/spack:0.23

libgcrypt20-1.10.3-150600.3.9.1

Container containers/lmcache-lmstack-router:0

libgcrypt20-1.10.3-150600.3.9.1

Container containers/lmcache-vllm-openai:0

libgcrypt20-1.10.3-150600.3.9.1

Container containers/milvus:2.4

libgcrypt20-1.10.3-150600.3.9.1

Container containers/open-webui:0

libgcrypt20-1.10.3-150600.3.9.1

Container containers/pytorch:2-nvidia

libgcrypt20-1.10.3-150600.3.9.1

Container containers/vllm-openai:0

libgcrypt20-1.10.3-150600.3.9.1

Container private-registry/harbor-db:latest

libgcrypt20-1.10.3-150600.3.9.1

Container private-registry/harbor-nginx:latest

libgcrypt20-1.10.3-150600.3.9.1

Container private-registry/harbor-portal:latest

libgcrypt20-1.10.3-150600.3.9.1

Container private-registry/harbor-valkey:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/ltss/sle15.6/sle15:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/manager/5.0/x86_64/proxy-httpd:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/manager/5.0/x86_64/proxy-salt-broker:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/manager/5.0/x86_64/proxy-ssh:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/manager/5.0/x86_64/server-attestation:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/manager/5.0/x86_64/server-migration-14-16:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/manager/5.0/x86_64/server:latest

libgcrypt20-1.10.3-150600.3.9.1

Container suse/mariadb:10.11

libgcrypt20-1.10.3-150600.3.9.1

Container suse/sle15:15.6

libgcrypt20-1.10.3-150600.3.9.1

Container trento/trento-wanda:latest

libgcrypt20-1.10.3-150600.3.9.1

Container trento/trento-web:latest

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-Azure-3P

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-Azure-Basic

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-Azure-Standard

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-BYOS

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-BYOS-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-BYOS-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-BYOS-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-CHOST-BYOS

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-CHOST-BYOS-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-CHOST-BYOS-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-CHOST-BYOS-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-CHOST-BYOS-GDC

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-EC2-ECS-HVM

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-HPC

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-HPC-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-HPC-BYOS

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-HPC-BYOS-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-HPC-BYOS-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-HPC-BYOS-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-HPC-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-HPC-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-Hardened-BYOS

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-Hardened-BYOS-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-Hardened-BYOS-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-Hardened-BYOS-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Azure-3P

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-BYOS

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-BYOS-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-BYOS-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-BYOS-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Hardened

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Hardened-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Hardened-BYOS

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Hardened-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAP-Hardened-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAPCAL

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAPCAL-Azure

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAPCAL-EC2

libgcrypt20-1.10.3-150600.3.9.1

Image SLES15-SP6-SAPCAL-GCE

libgcrypt20-1.10.3-150600.3.9.1

Image ai_15_6

libgcrypt20-1.10.3-150600.3.9.1

Image pr_15_6

libgcrypt20-1.10.3-150600.3.9.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libgcrypt-devel-1.10.3-150600.3.9.1

libgcrypt20-1.10.3-150600.3.9.1

libgcrypt20-32bit-1.10.3-150600.3.9.1

openSUSE Leap 15.6

libgcrypt-devel-1.10.3-150600.3.9.1

libgcrypt-devel-32bit-1.10.3-150600.3.9.1

libgcrypt20-1.10.3-150600.3.9.1

libgcrypt20-32bit-1.10.3-150600.3.9.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-202502447-1/
Link for SUSE-SU-2025:02447-1
https://lists.suse.com/pipermail/sle-updates/2025-July/040837.html
E-Mail link for SUSE-SU-2025:02447-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1221107
SUSE Bug 1221107
https://www.suse.com/security/cve/CVE-2024-2236/
SUSE CVE CVE-2024-2236 page

Описание

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.

Затронутые продукты

Container bci/bci-init:15.6:libgcrypt20-1.10.3-150600.3.9.1

Container bci/bci-minimal:15.6:libgcrypt20-1.10.3-150600.3.9.1

Container bci/bci-sle15-kernel-module-devel:15.6:libgcrypt20-1.10.3-150600.3.9.1

Container bci/node:20:libgcrypt20-1.10.3-150600.3.9.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-2236.html
CVE-2024-2236
https://bugzilla.suse.com/1221107
SUSE Bug 1221107