Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0022-1

Опубликовано: 13 янв. 2020
Источник: suse-cvrf

Описание

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

Security issues fixed:

  • CVE-2019-13627: Mitigation against an ECDSA timing attack (bsc#1148987).

Bug fixes:

  • Added CMAC AES self test (bsc#1155339).
  • Added CMAC TDES self test missing (bsc#1155338).
  • Fix test dsa-rfc6979 in FIPS mode.

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Список пакетов

openSUSE Leap 15.1
libgcrypt-cavs-1.8.2-lp151.9.7.1
libgcrypt-devel-1.8.2-lp151.9.7.1
libgcrypt-devel-32bit-1.8.2-lp151.9.7.1
libgcrypt20-1.8.2-lp151.9.7.1
libgcrypt20-32bit-1.8.2-lp151.9.7.1
libgcrypt20-hmac-1.8.2-lp151.9.7.1
libgcrypt20-hmac-32bit-1.8.2-lp151.9.7.1

Ссылки

Описание

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.

Затронутые продукты
openSUSE Leap 15.1:libgcrypt-cavs-1.8.2-lp151.9.7.1
openSUSE Leap 15.1:libgcrypt-devel-1.8.2-lp151.9.7.1
openSUSE Leap 15.1:libgcrypt-devel-32bit-1.8.2-lp151.9.7.1
openSUSE Leap 15.1:libgcrypt20-1.8.2-lp151.9.7.1
Ссылки