SUSE-CU-2020:1-1: Security update of suse/sle15

[sle-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle15
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2020:1-1
Container Tags        : suse/sle15:15.0 , suse/sle15:15.0.4.22.123
Severity              : moderate
Type                  : security
References            : 1155337 1155338 1155339 1155346 1157775 1158101 1158809 CVE-2019-1551
                        SLE-8789 
-----------------------------------------------------------------

The container suse/sle15 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2020:2-1
Released:    Thu Jan  2 09:50:04 2020
Summary:     Security update for openssl-1_1
Type:        security
Severity:    moderate
References:  1155346,1157775,1158101,1158809,CVE-2019-1551,SLE-8789
Description:

This update for openssl-1_1 fixes the following issues:

Security issue fixed:

- CVE-2019-1551: Fixed an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli (bsc#1158809).

Various FIPS related improvements were done:

- FIPS: Backport SSH KDF to openssl (jsc#SLE-8789, bsc#1157775).
- Port FIPS patches from SLE-12 (bsc#1158101)
- Use SHA-2 in the RSA pairwise consistency check (bsc#1155346)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2020:5-1
Released:    Thu Jan  2 12:33:02 2020
Summary:     Recommended update for libgcrypt
Type:        recommended
Severity:    moderate
References:  1155337,1155338,1155339
Description:

This update for libgcrypt fixes the following issues:

Various FIPS related improvements were done:

- FIPS: RSA/DSA/ECDSA are missing hashing operation (bsc#1155337)
- Fix the following FIPS tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
- Fix test dsa-rfc6979 in FIPS mode: Disabled tests in elliptic curves with 192 bits which are not recommended in FIPS mode
- Added CMAC AES and TDES FIPS self-tests: (bsc#1155339, bsc#1155338)