[ol9_u3_security_validation] libgcrypt-10:1.10.0-10.0.1.el9_2_fips.aarch64

Libgcrypt is a general purpose crypto library based on the code used
in GNU Privacy Guard.  This is a development version.

Changelog (Show File list) (Show related packages)

• Tue Nov 07 2023 Ilya Okomin <ilya.okomin@oracle.com> - 1.10.0-10.0.1_fips

  - Add FIPS package change: add fips suffix to Release and
    set Epoch to 10 [Orabug: 35961378]

• Mon Oct 30 2023 Ilya Okomin <ilya.okomin@oracle.com> - 1.10.0-10.0.1

  - Update FIPS module name for Oracle Linux [Orabug: 35961378]

• Mon Mar 20 2023 Jakub Jelen <jjelen@redhat.com> - 1.10.0-10

  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags

• Tue Jan 24 2023 Jakub Jelen <jjelen@redhat.com> - 1.10.0-9

  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator

• Thu Oct 20 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-8

  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode

• Thu Oct 06 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-7

  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)

• Tue Sep 27 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-6

  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)

• Wed Aug 17 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-5

  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)

• Fri May 06 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-4

  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)

• Thu Mar 31 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-3

  - Use correct FIPS module name (#2067123)