openSUSE Security Update: Security update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1596-1 Rating: low References: #944835 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: libgcrypt was updated to include countermeasures against Lenstra's fault attack on RSA Chinese Remainder Theorem optimization in RSA. A signature verification step was updated to protect against leaks of private keys in case of hardware faults or implementation errors in numeric libraries. GnuPG already performed this check by itself and was not affected. This fix is equivalent, but not equal to CVE-2015-5738 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-597=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-597=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgcrypt-cavs-1.6.1-8.10.1 libgcrypt-cavs-debuginfo-1.6.1-8.10.1 libgcrypt-debugsource-1.6.1-8.10.1 libgcrypt-devel-1.6.1-8.10.1 libgcrypt-devel-debuginfo-1.6.1-8.10.1 libgcrypt20-1.6.1-8.10.1 libgcrypt20-debuginfo-1.6.1-8.10.1 libgcrypt20-hmac-1.6.1-8.10.1 - openSUSE 13.2 (x86_64): libgcrypt-devel-32bit-1.6.1-8.10.1 libgcrypt-devel-debuginfo-32bit-1.6.1-8.10.1 libgcrypt20-32bit-1.6.1-8.10.1 libgcrypt20-debuginfo-32bit-1.6.1-8.10.1 libgcrypt20-hmac-32bit-1.6.1-8.10.1 - openSUSE 13.1 (i586 x86_64): libgcrypt-debugsource-1.5.4-2.12.1 libgcrypt-devel-1.5.4-2.12.1 libgcrypt-devel-debuginfo-1.5.4-2.12.1 libgcrypt11-1.5.4-2.12.1 libgcrypt11-debuginfo-1.5.4-2.12.1 - openSUSE 13.1 (x86_64): libgcrypt-devel-32bit-1.5.4-2.12.1 libgcrypt-devel-debuginfo-32bit-1.5.4-2.12.1 libgcrypt11-32bit-1.5.4-2.12.1 libgcrypt11-debuginfo-32bit-1.5.4-2.12.1 References: https://bugzilla.suse.com/944835