CVE-2019-12904

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack

This update for libgcrypt fixes the following issues:

Security issues fixed:

• CVE-2019-12904: The C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) (bsc#1138939)

Other bugfixes:

• Don't run full FIPS self-tests from constructor (bsc#1097073)
• Skip all the self-tests except for binary integrity when called from the constructor (bsc#1097073)
• Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
• avoid executing some tests twice.
• Fixed a race condition in initialization.
• Fixed env-script-interpreter in cavs_driver.pl
• Fixed redundant fips tests in some situations causing failure to boot in fips mode. (bsc#1097073)

This helps during booting of the system in FIPS mode with insufficient entropy.

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libgcrypt-cavs-1.9.4-1.2 package on the GA media of openSUSE Tumbleweed.

This update for libgcrypt fixes the following issues:

Security issues fixed:

• CVE-2019-12904: The C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) (bsc#1138939)

Other bugfixes:

• Don't run full FIPS self-tests from constructor (bsc#1097073)
• Skip all the self-tests except for binary integrity when called from the constructor (bsc#1097073)
• Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
• avoid executing some tests twice.
• Fixed a race condition in initialization.
• Fixed env-script-interpreter in cavs_driver.pl
• Fixed redundant fips tests in some situations causing failure to boot in fips mode. (bsc#1097073)

This helps during booting of the system in FIPS mode with insufficient entropy.

This update for libgcrypt fixes the following issues:

Security issue fixed:

• CVE-2019-12904: Fixed a flush-and-reload side-channel attack in the AES implementation (bsc#1138939).