[ol8_u4_security_validation] libgcrypt-devel-10:1.8.5-8.el8_10_fips.x86_64

Libgcrypt is a general purpose crypto library based on the code used
in GNU Privacy Guard.  This package contains files needed to develop
applications using libgcrypt.

Changelog (Show File list) (Show related packages)

• Thu Jul 30 2026 Kevin Lyons <kevin.x.lyons@oracle.com> - 1.8.5-8_fips

  - Add API to provide hash calculation in RSA/DSA/ECDSA signature
    operations [Orabug: 33081130]
  - Change Epoch from 1 to 10

• Mon Jun 29 2026 Jakub Jelen <jjelen@redhat.com> - 1.8.5-8

  - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext

• Tue Apr 05 2022 Jakub Jelen <jjelen@redhat.com> - 1.8.5-7

  - Fix CVE-2021-33560 (#2018525)

• Mon Jun 28 2021 Jakub Jelen <jjelen@redhat.com> - 1.8.5-6

  - Fix for CVE-2021-40528 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)

• Thu May 13 2021 Jakub Jelen <jjelen@redhat.com> - 1.8.5-5

  - Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)

• Mon Jun 15 2020 Tomáš Mráz <tmraz@redhat.com> 1.8.5-4

  - add PBKDF2 selftest for FIPS POST

• Tue Apr 28 2020 Tomáš Mráz <tmraz@redhat.com> 1.8.5-3

  - new upstream version 1.8.5
  - AES performance improvements backported from master branch
  - FIPS module is implicit with kernel FIPS flag
  - always run the FIPS selftests if FIPS module is installed

• Mon Jun 24 2019 Tomáš Mráz <tmraz@redhat.com> 1.8.3-4

  - improve the continuous FIPS entropy test

• Mon Jun 03 2019 Tomáš Mráz <tmraz@redhat.com> 1.8.3-3

  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode

• Thu Jul 12 2018 Tomáš Mráz <tmraz@redhat.com> 1.8.3-2

  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application