FlawAtlas
Search the atlas
SUSE-SU-2015:1626-1 Not scored

Security update for libgcrypt

This update fixes the following issues: * Use ciphertext blinding for Elgamal decryption [CVE-2014-3591]. See http://www.cs.tau.ac.il/~tromer/radioexp/ for details. (bsc#920057) * Fixed data-dependent timing variations in modular exponentiation [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks are Practical]

Exploit probability Not scored
Published August 17, 2015
Required by Not available
Last source change May 2, 2025

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Desktop 11 SP3 libgcrypt
SUSE:Linux Enterprise Desktop 11 SP4 libgcrypt
SUSE:Linux Enterprise Server 11 SP3 libgcrypt
SUSE:Linux Enterprise Server 11 SP3-TERADATA libgcrypt
SUSE:Linux Enterprise Server 11 SP4 libgcrypt
SUSE:Linux Enterprise Server for SAP Applications 11 SP3 libgcrypt
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 libgcrypt
SUSE:Linux Enterprise Software Development Kit 11 SP3 libgcrypt
SUSE:Linux Enterprise Software Development Kit 11 SP4 libgcrypt

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2015:1626-1

This update fixes the following issues: * Use ciphertext blinding for Elgamal decryption [CVE-2014-3591]. See http://www.cs.tau.ac.il/~tromer/radioexp/ for details. (bsc#920057) * Fixed data-dependent timing variations in modular exponentiation [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks are Practical]

View original source

05 / REFERENCES

Further evidence