[SECURITY] Fedora 27 Update: libgcrypt-1.8.3-1.fc27
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-6788454ab6
2018-06-17 19:43:26.097389
--------------------------------------------------------------------------------
Name : libgcrypt
Product : Fedora 27
Version : 1.8.3
Release : 1.fc27
URL : http://www.gnupg.org/
Summary : A general-purpose cryptography library
Description :
Libgcrypt is a general purpose crypto library based on the code used
in GNU Privacy Guard. This is a development version.
--------------------------------------------------------------------------------
Update Information:
Minor security update to version 1.8.3 from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 14 2018 Tom���� Mr��z <tmraz(a)redhat.com> 1.8.3-1
- new upstream version 1.8.3
* Tue Feb 6 2018 Tom���� Mr��z <tmraz(a)redhat.com> 1.8.2-2
- fix behavior when getrandom syscall is not present (#1542453)
* Thu Dec 21 2017 Tom���� Mr��z <tmraz(a)redhat.com> 1.8.2-1
- new upstream version 1.8.2
* Tue Dec 5 2017 Tom���� Mr��z <tmraz(a)redhat.com> 1.8.1-3
- do not try to access() /dev/urandom either if getrandom() works
* Mon Dec 4 2017 Tom���� Mr��z <tmraz(a)redhat.com> 1.8.1-2
- do not try to open /dev/urandom if getrandom() works (#1380866)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591174 - CVE-2018-0495 libgcrypt: openssl: ROHNP - Key Extraction Side
Channel in Multiple Crypto Libraries [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591174
[ 2 ] Bug #1542453 - libgcrypt-1.8.1-3 breaks gnupg2 on some systems (old kernels?)
https://bugzilla.redhat.com/show_bug.cgi?id=1542453
[ 3 ] Bug #1590804 - libgcrypt-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1590804
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-6788454ab6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------