RHBA-2023:1968 - Bug Fix Advisory

Topic

An update for libgcrypt is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.

Description

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

Bug Fix(es) and Enhancement(s):

• The libgcrypt FIPS checksum code needs an update. (BZ#2168653)
• Address more FIPS-related concerns. (BZ#2168655)
• In the FIPS mode, libgcrypt PBKDF2 should enforce minimum input passphrase size (and potentially also salt length and iterations). (BZ#2168657)
• Address more FIPS-related concerns (vol. 2). (BZ#2181475)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0 s390x
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0 ppc64le
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x

Fixes

• BZ - 2168653 - libgcrypt FIPS checksum code needs update [rhel-9.0.0.z]
• BZ - 2168655 - Address more FIPS-related concerns [rhel-9.0.0.z]
• BZ - 2168657 - in FIPS mode, libgcrypt PBKDF2 should enforce minimum input passphrase size (and potentially also salt length and iterations) [rhel-9.0.0.z]
• BZ - 2181475 - Address more FIPS-related concerns (vol. 2) [rhel-9.0.0.z]

CVEs

(none)

References

(none)