Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:2161-1

Опубликовано: 24 сент. 2019
Источник: suse-cvrf

Описание

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

Security issues fixed:

  • CVE-2019-13627: Mitigated ECDSA timing attack. (bsc#1148987)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
libgcrypt-cavs-1.8.2-lp150.5.13.1
libgcrypt-devel-1.8.2-lp150.5.13.1
libgcrypt-devel-32bit-1.8.2-lp150.5.13.1
libgcrypt20-1.8.2-lp150.5.13.1
libgcrypt20-32bit-1.8.2-lp150.5.13.1
libgcrypt20-hmac-1.8.2-lp150.5.13.1
libgcrypt20-hmac-32bit-1.8.2-lp150.5.13.1

Ссылки

Описание

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.

Затронутые продукты
openSUSE Leap 15.0:libgcrypt-cavs-1.8.2-lp150.5.13.1
openSUSE Leap 15.0:libgcrypt-devel-1.8.2-lp150.5.13.1
openSUSE Leap 15.0:libgcrypt-devel-32bit-1.8.2-lp150.5.13.1
openSUSE Leap 15.0:libgcrypt20-1.8.2-lp150.5.13.1
Ссылки