shield Security update for libgcrypt

SUSE-SLE-DESKTOP-12-2015-296

This update of libgcrypt fixes one security issue and brings various FIPS 140-2 related improvements. libgcrypt now uses ciphertext blinding for Elgamal decryption (CVE-2014-3591) FIPS 140-2 related changes: * The library performs its self-tests when the module is complete (the -hmac file is also installed). * Added a NIST 800-90a compliant DRBG. * Change DSA key generation to be FIPS 186-4 compliant. * Change RSA key generation to be FIPS 186-4 compliant. * Enable HW support in fips mode (bnc#896435) * Make DSA selftest use 2048 bit keys (bnc#898003) * Added ECDSA selftests and add support for it to the CAVS testing framework (bnc#896202) * Various CAVS testing improvements.

• Release Date
  Jun 11 2015
• References
  Bugzilla: 896202, 929919, 905483, 900276, 899524, 928740, 920057, 896435, 898003, 900275
  CVEs: CVE-2014-3591
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  libgcrypt
  The GNU Crypto Library

  1.6.1-13.1 lock src

  libgcrypt20
  The GNU Crypto Library

  1.6.1-13.1 lock rpm

  libgcrypt20-32bit
  The GNU Crypto Library

  1.6.1-13.1 lock rpm