[opensuse-security] serious flaw in libgcrypt?