Revision Date: | 2020-12-01 | Version: | 1 |
Title: | Security update for libgcrypt (Moderate) |
Description: |
This update for libgcrypt fixes the following issues:
- CVE-2017-9526: Store the session key in secure memory to ensure that constant time point operations are used in the MPI library. (bsc#1042326)
- Don't require secure memory for the fips selftests, this prevents the 'Oops, secure memory pool already initialized' warning. (bsc#931932)
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1005023 1012382 1039616 1042286 1042326 1047487 1062604 1063043 1064232 1064311 1065180 1065364 1068032 1068951 1071009 1072556 1072962 1073090 1073792 1073809 1073874 1073912 1076696 1082519 1082863 1083247 1084536 1085042 1088810 1089066 1092903 1094466 1095344 1096547 1096723 1097104 1097108 1099306 1099597 1099811 1099813 1099844 1099845 1099846 1099849 1099863 1099864 1099922 1099993 1099999 1100000 1100001 1100152 1101591 1102517 1102682 1102715 1102870 1103445 1104076 1104319 1104495 1105292 1105296 1105322 1105323 1105348 1105396 1105536 1106016 1106095 1106191 1106369 1106509 1106511 1106512 1106594 1107689 1107735 1107966 1108239 1108399 1109333 1111056 1114981 1115518 1119971 1120323 1136446 1137597 1140747 1155419 1155787 1160471 1163985 1170441 1172524 931932 964063 969470 CVE-2009-0023 CVE-2009-2412 CVE-2009-3560 CVE-2009-3720 CVE-2010-1623 CVE-2011-0419 CVE-2011-1928 CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186 CVE-2014-8354 CVE-2014-8355 CVE-2014-8562 CVE-2014-8716 CVE-2014-9805 CVE-2014-9806 CVE-2014-9807 CVE-2014-9808 CVE-2014-9809 CVE-2014-9810 CVE-2014-9811 CVE-2014-9812 CVE-2014-9813 CVE-2014-9814 CVE-2014-9815 CVE-2014-9816 CVE-2014-9817 CVE-2014-9818 CVE-2014-9819 CVE-2014-9820 CVE-2014-9821 CVE-2014-9822 CVE-2014-9823 CVE-2014-9824 CVE-2014-9825 CVE-2014-9826 CVE-2014-9828 CVE-2014-9829 CVE-2014-9830 CVE-2014-9831 CVE-2014-9832 CVE-2014-9833 CVE-2014-9834 CVE-2014-9835 CVE-2014-9836 CVE-2014-9837 CVE-2014-9838 CVE-2014-9839 CVE-2014-9840 CVE-2014-9841 CVE-2014-9842 CVE-2014-9843 CVE-2014-9844 CVE-2014-9845 CVE-2014-9846 CVE-2014-9847 CVE-2014-9848 CVE-2014-9849 CVE-2014-9850 CVE-2014-9851 CVE-2014-9852 CVE-2014-9853 CVE-2014-9854 CVE-2014-9907 CVE-2015-8894 CVE-2015-8895 CVE-2015-8896 CVE-2015-8897 CVE-2015-8898 CVE-2015-8900 CVE-2015-8901 CVE-2015-8902 CVE-2015-8903 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959 CVE-2016-10046 CVE-2016-10048 CVE-2016-10049 CVE-2016-10050 CVE-2016-10051 CVE-2016-10052 CVE-2016-10059 CVE-2016-10060 CVE-2016-10061 CVE-2016-10062 CVE-2016-10063 CVE-2016-10064 CVE-2016-10065 CVE-2016-10068 CVE-2016-10069 CVE-2016-10070 CVE-2016-10071 CVE-2016-10144 CVE-2016-10145 CVE-2016-10146 CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718 CVE-2016-4562 CVE-2016-4563 CVE-2016-4564 CVE-2016-5010 CVE-2016-5118 CVE-2016-5687 CVE-2016-5688 CVE-2016-5689 CVE-2016-5690 CVE-2016-5691 CVE-2016-5841 CVE-2016-5842 CVE-2016-6491 CVE-2016-6520 CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516 CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 CVE-2016-7522 CVE-2016-7523 CVE-2016-7524 CVE-2016-7525 CVE-2016-7526 CVE-2016-7527 CVE-2016-7528 CVE-2016-7529 CVE-2016-7530 CVE-2016-7531 CVE-2016-7532 CVE-2016-7533 CVE-2016-7534 CVE-2016-7535 CVE-2016-7537 CVE-2016-7538 CVE-2016-7539 CVE-2016-7540 CVE-2016-7799 CVE-2016-7800 CVE-2016-7996 CVE-2016-7997 CVE-2016-8677 CVE-2016-8682 CVE-2016-8683 CVE-2016-8684 CVE-2016-8707 CVE-2016-8862 CVE-2016-8866 CVE-2016-9556 CVE-2016-9559 CVE-2016-9773 CVE-2017-17805 CVE-2017-17806 CVE-2017-2518 CVE-2017-5506 CVE-2017-5507 CVE-2017-5508 CVE-2017-5510 CVE-2017-5511 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2017-6318 CVE-2017-6502 CVE-2017-7606 CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8343 CVE-2017-8344 CVE-2017-8345 CVE-2017-8346 CVE-2017-8347 CVE-2017-8348 CVE-2017-8349 CVE-2017-8350 CVE-2017-8351 CVE-2017-8352 CVE-2017-8353 CVE-2017-8354 CVE-2017-8355 CVE-2017-8356 CVE-2017-8357 CVE-2017-8765 CVE-2017-8830 CVE-2017-9098 CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144 CVE-2017-9526 CVE-2018-0486 CVE-2018-0489 CVE-2018-1000026 CVE-2018-10853 CVE-2018-10876 CVE-2018-10877 CVE-2018-10878 CVE-2018-10879 CVE-2018-10880 CVE-2018-10881 CVE-2018-10882 CVE-2018-10883 CVE-2018-10902 CVE-2018-10938 CVE-2018-10940 CVE-2018-12472 CVE-2018-12896 CVE-2018-13093 CVE-2018-13094 CVE-2018-13095 CVE-2018-14617 CVE-2018-14678 CVE-2018-15572 CVE-2018-15594 CVE-2018-16276 CVE-2018-16658 CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 CVE-2018-17182 CVE-2018-3646 CVE-2018-5390 CVE-2018-6554 CVE-2018-6555 CVE-2018-7480 CVE-2018-7757 CVE-2018-9363 CVE-2019-11477 CVE-2019-11478 CVE-2019-15681 CVE-2019-15690 CVE-2019-20788 CVE-2019-3846 CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 CVE-2020-1720 SUSE-SU-2017:1608-1 SUSE-SU-2018:0012-1 SUSE-SU-2018:0720-1 SUSE-SU-2018:3084-1 SUSE-SU-2018:3467-1 SUSE-SU-2019:0135-1 SUSE-SU-2019:3050-1 SUSE-SU-2020:0586-1 SUSE-SU-2020:1165-1
|
Platform(s): | openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
Definition Synopsis |
openSUSE Leap 15.0 is installed AND Package Information
evince-3.26.0+20180128.1bd86963-lp150.2 is installed
OR evince-lang-3.26.0+20180128.1bd86963-lp150.2 is installed
OR evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-lp150.2 is installed
OR evince-plugin-psdocument-3.26.0+20180128.1bd86963-lp150.2 is installed
OR libevdocument3-4-3.26.0+20180128.1bd86963-lp150.2 is installed
OR libevview3-3-3.26.0+20180128.1bd86963-lp150.2 is installed
OR nautilus-evince-3.26.0+20180128.1bd86963-lp150.2 is installed
OR typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-lp150.2 is installed
OR typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-lp150.2 is installed
|
Definition Synopsis |
openSUSE Leap 15.1 is installed
AND Package Information
nfs-client-2.1.1-lp151.7.3 is installed
OR nfs-doc-2.1.1-lp151.7.3 is installed
OR nfs-kernel-server-2.1.1-lp151.7.3 is installed
OR nfs-utils-2.1.1-lp151.7.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
libgcrypt-1.6.1-16.39 is installed
OR libgcrypt20-1.6.1-16.39 is installed
OR libgcrypt20-32bit-1.6.1-16.39 is installed
OR libgcrypt20-hmac-1.6.1-16.39 is installed
OR libgcrypt20-hmac-32bit-1.6.1-16.39 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
kernel-default-4.4.121-92.95 is installed
OR kernel-default-base-4.4.121-92.95 is installed
OR kernel-default-devel-4.4.121-92.95 is installed
OR kernel-devel-4.4.121-92.95 is installed
OR kernel-macros-4.4.121-92.95 is installed
OR kernel-source-4.4.121-92.95 is installed
OR kernel-syms-4.4.121-92.95 is installed
OR lttng-modules-2.7.1-9.6 is installed
OR lttng-modules-kmp-default-2.7.1_k4.4.121_92.95-9.6 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
kgraft-patch-4_4_121-92_98-default-6-2 is installed
OR kgraft-patch-SLE12-SP2_Update_26-6-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_121-92_80-default-4-2 is installed
OR kgraft-patch-SLE12-SP2_Update_22-4-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
libMagickCore-6_Q16-1-6.8.8.1-70 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-70 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND Package Information
java-1_8_0-openjdk-1.8.0.222-27.35 is installed
OR java-1_8_0-openjdk-demo-1.8.0.222-27.35 is installed
OR java-1_8_0-openjdk-devel-1.8.0.222-27.35 is installed
OR java-1_8_0-openjdk-headless-1.8.0.222-27.35 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND Package Information
kgraft-patch-4_4_180-94_100-default-4-2 is installed
OR kgraft-patch-SLE12-SP3_Update_27-4-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
adns-1.4-103.3 is installed
OR libadns1-1.4-103.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
MozillaFirefox-60.3.0-109.50 is installed
OR MozillaFirefox-translations-common-60.3.0-109.50 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
perl-5.18.2-12.17 is installed
OR perl-32bit-5.18.2-12.17 is installed
OR perl-base-5.18.2-12.17 is installed
OR perl-doc-5.18.2-12.17 is installed
|
Definition Synopsis |
SUSE OpenStack Cloud 8 is installed
AND cobbler-2.6.6-49.9 is installed
|
Definition Synopsis |
SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
libssh2-1-1.4.3-20.9 is installed
OR libssh2-1-32bit-1.4.3-20.9 is installed
OR libssh2_org-1.4.3-20.9 is installed
|