SUSE-SU-2019:2510-1

UNKNOWN

Security update for libgcrypt

Published Oct 1, 2019

Modified 6 years ago

Fix available

Details

This update for libgcrypt fixes the following issues:

Security issues fixed:

CVE-2019-13627: Mitigated ECDSA timing attack. (bsc#1148987)

Affected Packages

libgcrypt

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSS

Fixed in:

1.6.1-16.68.1

libgcrypt20

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSS

Fixed in:

1.6.1-16.68.1

libgcrypt20-32bit

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSS

Fixed in:

1.6.1-16.68.1

libgcrypt20-hmac

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

1.6.1-16.68.1

libgcrypt20-hmac-32bit

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

1.6.1-16.68.1

libgcrypt-devel

SUSE Linux Enterprise Software Development Kit 12 SP4SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

1.6.1-16.68.1

References

REPORT

https://bugzilla.suse.com/1148987

WEB

https://www.suse.com/security/cve/CVE-2019-13627

ADVISORY