shield Security update for libgcrypt

SUSE-SLE-DESKTOP-12-SP2-2017-985

This update for libgcrypt fixes the following issues: - CVE-2017-9526: Store the session key in secure memory to ensure that constant time point operations are used in the MPI library. (bsc#1042326) - Don't require secure memory for the fips selftests, this prevents the "Oops, secure memory pool already initialized" warning. (bsc#931932)

• Release Date
  Jun 19 2017
• References
  Bugzilla: 1042326, 931932
  CVEs: CVE-2017-9526
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12.2 x86_64

• Packages
  libgcrypt
  The GNU Crypto Library

  1.6.1-16.39.1 lock src

  libgcrypt20
  The GNU Crypto Library

  1.6.1-16.39.1 lock rpm

  libgcrypt20-32bit
  The GNU Crypto Library

  1.6.1-16.39.1 lock rpm