File _patchinfo of Package patchinfo.5432

<patchinfo incident="5432">
  <issue id="1046659" tracker="bnc">[FIPS] libgcrypt: drbg - do not call drbg_instantiate in self-test</issue>
  <issue id="1043333" tracker="bnc">[FIPS] gnome-keyring-daemon consumes nearly 100% CPU and never release</issue>
  <issue id="1047008" tracker="bnc">[FIPS] [s390x] libgcrypt selftest: binary  (0): No such file or directory (/usr/sbin/.gsad.hmac)</issue>
  <category>recommended</category>
  <rating>moderate</rating>
  <packager>AndreasStieger</packager>
  <description>This update for libgcrypt fixes the following issues:

- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopened descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
    save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests (bsc#1046659)
- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
</description>
  <summary>Recommended update for libgcrypt</summary>
</patchinfo>