< back to search

shield Security update for libgcrypt

SUSE-SLE-SDK-12-SP2-2017-985

This update for libgcrypt fixes the following issues: - CVE-2017-9526: Store the session key in secure memory to ensure that constant time point operations are used in the MPI library. (bsc#1042326) - Don't require secure memory for the fips selftests, this prevents the "Oops, secure memory pool already initialized" warning. (bsc#931932)

Release Date

Jun 19 2017
References

Bugzilla: 1042326, 931932
CVEs: CVE-2017-9526
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

Packages

libgcrypt
The GNU Crypto Library

1.6.1-16.39.1 lock src

libgcrypt-devel
The GNU Crypto Library

1.6.1-16.39.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

Packages

libgcrypt
The GNU Crypto Library

1.6.1-16.39.1 lock src

libgcrypt-devel
The GNU Crypto Library

1.6.1-16.39.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

Packages

libgcrypt
The GNU Crypto Library

1.6.1-16.39.1 lock src

libgcrypt-devel
The GNU Crypto Library

1.6.1-16.39.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

Packages

libgcrypt
The GNU Crypto Library

1.6.1-16.39.1 lock src

libgcrypt-devel
The GNU Crypto Library

1.6.1-16.39.1 lock rpm