- What: Security update for libgcrypt with fix for denial of service and buffer overflow
- Impact: Red Hat Enterprise Linux 9 users should apply the update to mitigate the vulnerability
Red Hat Product Errata RHSA-2026:50147 - Security Advisory Issued: 2026-08-04 Updated: 2026-08-04 RHSA-2026:50147 - Security Advisory Overview Updated Packages Synopsis Moderate: libgcrypt security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libgcrypt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2461063 - CVE-2026-41989 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVEs CVE-2026-41989 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM libgcrypt-1.10.0-13.el9_8.src.rpm SHA-256: c2737830c577d7c45aefa3213d770be924617a46e6ab56824edec9b6341af8d4 x86_64 libgcrypt-1.10.0-13.el9_8.i686.rpm SHA-256: 51554f62f9de57c259348606c7e6e15a2c0f6e9ae48e295ffab85c16c24ae4aa libgcrypt-1.10.0-13.el9_8.x86_64.rpm SHA-256: c07cd9f613809195b8691d28fd2f3bff55b2a83b9c1cdf4a32c681e0e32dfafb libgcrypt-debuginfo-1.10.0-13.el9_8.i686.rpm SHA-256: 32c73e3654d00fe0fe0a41e5f9bf2bc5c895d6eb50861a79c78b20131fbe965e libgcrypt-debuginfo-1.10.0-13.el9_8.i686.rpm SHA-256: 32c73e3654d00fe0fe0a41e5f9bf2bc5c895d6eb50861a79c78b20131fbe965e libgcrypt-debuginfo-1.10.0-13.el9_8.x86_64.rpm SHA-256: cfc15c7978d59aa118030024cd40698a34aaa12c3bf2ef2290a2fb258a6cf4ab libgcrypt-debuginfo-1.10.0-13.el9_8.x86_64.rpm SHA-256: cfc15c7978d59aa118030024cd40698a34aaa12c3bf2ef2290a2fb258a6cf4ab libgcrypt-debugsource-1.10.0-13.el9_8.i686.rpm SHA-256: 3450edaff1cd50091fd1ab7fb0684ac945b6ae86ddef204f2d2edbb638d83a35 libgcrypt-debugsource-1.10.0-13.el9_8.i686.rpm SHA-256: 3450edaff1cd50091fd1ab7fb0684ac945b6ae86ddef204f2d2edbb638d83a35 libgcrypt-debugsource-1.10.0-13.el9_8.x86_64.rpm SHA-256: e63b9a452bb0d2cb78dc115e95ae47a3b50609171a062ca04bb5c515635451f7 libgcrypt-debugsource-1.10.0-13.el9_8.x86_64.rpm SHA-256: e63b9a452bb0d2cb78dc115e95ae47a3b50609171a062ca04bb5c515635451f7 libgcrypt-devel-1.10.0-13.el9_8.i686.rpm SHA-256: c3a5d7806abe1c6d58d478f843efacc41d336d8d9896942048c13ed53adf2805 libgcrypt-devel-1.10.0-13.el9_8.x86_64.rpm SHA-256: 0ede8df6018da6d0e0273c4d6d6824fa07c83e60959e4cce50dd7558ea926b83 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.i686.rpm SHA-256: 757fc46907aeeedbe625f33e06443e353cbbd2095d4338c123552106bb2a3989 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.i686.rpm SHA-256: 757fc46907aeeedbe625f33e06443e353cbbd2095d4338c123552106bb2a3989 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.x86_64.rpm SHA-256: 23a9202082c2b634c4f46337699a9a566e50244d08a5c8ac3b76dc919fcf64b0 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.x86_64.rpm SHA-256: 23a9202082c2b634c4f46337699a9a566e50244d08a5c8ac3b76dc919fcf64b0 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM libgcrypt-1.10.0-13.el9_8.src.rpm SHA-256: c2737830c577d7c45aefa3213d770be924617a46e6ab56824edec9b6341af8d4 x86_64 libgcrypt-1.10.0-13.el9_8.i686.rpm SHA-256: 51554f62f9de57c259348606c7e6e15a2c0f6e9ae48e295ffab85c16c24ae4aa libgcrypt-1.10.0-13.el9_8.x86_64.rpm SHA-256: c07cd9f613809195b8691d28fd2f3bff55b2a83b9c1cdf4a32c681e0e32dfafb libgcrypt-debuginfo-1.10.0-13.el9_8.i686.rpm SHA-256: 32c73e3654d00fe0fe0a41e5f9bf2bc5c895d6eb50861a79c78b20131fbe965e libgcrypt-debuginfo-1.10.0-13.el9_8.i686.rpm SHA-256: 32c73e3654d00fe0fe0a41e5f9bf2bc5c895d6eb50861a79c78b20131fbe965e libgcrypt-debuginfo-1.10.0-13.el9_8.x86_64.rpm SHA-256: cfc15c7978d59aa118030024cd40698a34aaa12c3bf2ef2290a2fb258a6cf4ab libgcrypt-debuginfo-1.10.0-13.el9_8.x86_64.rpm SHA-256: cfc15c7978d59aa118030024cd40698a34aaa12c3bf2ef2290a2fb258a6cf4ab libgcrypt-debugsource-1.10.0-13.el9_8.i686.rpm SHA-256: 3450edaff1cd50091fd1ab7fb0684ac945b6ae86ddef204f2d2edbb638d83a35 libgcrypt-debugsource-1.10.0-13.el9_8.i686.rpm SHA-256: 3450edaff1cd50091fd1ab7fb0684ac945b6ae86ddef204f2d2edbb638d83a35 libgcrypt-debugsource-1.10.0-13.el9_8.x86_64.rpm SHA-256: e63b9a452bb0d2cb78dc115e95ae47a3b50609171a062ca04bb5c515635451f7 libgcrypt-debugsource-1.10.0-13.el9_8.x86_64.rpm SHA-256: e63b9a452bb0d2cb78dc115e95ae47a3b50609171a062ca04bb5c515635451f7 libgcrypt-devel-1.10.0-13.el9_8.i686.rpm SHA-256: c3a5d7806abe1c6d58d478f843efacc41d336d8d9896942048c13ed53adf2805 libgcrypt-devel-1.10.0-13.el9_8.x86_64.rpm SHA-256: 0ede8df6018da6d0e0273c4d6d6824fa07c83e60959e4cce50dd7558ea926b83 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.i686.rpm SHA-256: 757fc46907aeeedbe625f33e06443e353cbbd2095d4338c123552106bb2a3989 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.i686.rpm SHA-256: 757fc46907aeeedbe625f33e06443e353cbbd2095d4338c123552106bb2a3989 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.x86_64.rpm SHA-256: 23a9202082c2b634c4f46337699a9a566e50244d08a5c8ac3b76dc919fcf64b0 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.x86_64.rpm SHA-256: 23a9202082c2b634c4f46337699a9a566e50244d08a5c8ac3b76dc919fcf64b0 Red Hat Enterprise Linux for IBM z Systems 9 SRPM libgcrypt-1.10.0-13.el9_8.src.rpm SHA-256: c2737830c577d7c45aefa3213d770be924617a46e6ab56824edec9b6341af8d4 s390x libgcrypt-1.10.0-13.el9_8.s390x.rpm SHA-256: e29ed2d365748f7aa865e875ec33b16243a132af30ce4878e5dbcebda17cfa54 libgcrypt-debuginfo-1.10.0-13.el9_8.s390x.rpm SHA-256: eb330327073b22b52382e031c443469c0d08ed3a97ae4f6bbff7bff0e401cfe2 libgcrypt-debuginfo-1.10.0-13.el9_8.s390x.rpm SHA-256: eb330327073b22b52382e031c443469c0d08ed3a97ae4f6bbff7bff0e401cfe2 libgcrypt-debugsource-1.10.0-13.el9_8.s390x.rpm SHA-256: 45d5f0539020ca5b90f1994574e09448655444341b736a45ed279da9d56e1c90 libgcrypt-debugsource-1.10.0-13.el9_8.s390x.rpm SHA-256: 45d5f0539020ca5b90f1994574e09448655444341b736a45ed279da9d56e1c90 libgcrypt-devel-1.10.0-13.el9_8.s390x.rpm SHA-256: cae7c2223a0ff1918a9918824b9e1ee8c616786e84ce28628c851815fc446d8d libgcrypt-devel-debuginfo-1.10.0-13.el9_8.s390x.rpm SHA-256: 62f4581426043f33d7507ac311d079b0f789779f00b2ea75ec36155eb2f90422 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.s390x.rpm SHA-256: 62f4581426043f33d7507ac311d079b0f789779f00b2ea75ec36155eb2f90422 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM libgcrypt-1.10.0-13.el9_8.src.rpm SHA-256: c2737830c577d7c45aefa3213d770be924617a46e6ab56824edec9b6341af8d4 s390x libgcrypt-1.10.0-13.el9_8.s390x.rpm SHA-256: e29ed2d365748f7aa865e875ec33b16243a132af30ce4878e5dbcebda17cfa54 libgcrypt-debuginfo-1.10.0-13.el9_8.s390x.rpm SHA-256: eb330327073b22b52382e031c443469c0d08ed3a97ae4f6bbff7bff0e401cfe2 libgcrypt-debuginfo-1.10.0-13.el9_8.s390x.rpm SHA-256: eb330327073b22b52382e031c443469c0d08ed3a97ae4f6bbff7bff0e401cfe2 libgcrypt-debugsource-1.10.0-13.el9_8.s390x.rpm SHA-256: 45d5f0539020ca5b90f1994574e09448655444341b736a45ed279da9d56e1c90 libgcrypt-debugsource-1.10.0-13.el9_8.s390x.rpm SHA-256: 45d5f0539020ca5b90f1994574e09448655444341b736a45ed279da9d56e1c90 libgcrypt-devel-1.10.0-13.el9_8.s390x.rpm SHA-256: cae7c2223a0ff1918a9918824b9e1ee8c616786e84ce28628c851815fc446d8d libgcrypt-devel-debuginfo-1.10.0-13.el9_8.s390x.rpm SHA-256: 62f4581426043f33d7507ac311d079b0f789779f00b2ea75ec36155eb2f90422 libgcrypt-devel-debuginfo-1.10.0-13.el9_8.s390x.rpm SHA-256: 62f4581426043f33d7507ac311d079b0f789779f00b2ea75ec36155eb2f90422 Red Hat Enterprise Linux for Power, little endian 9 SRPM libgcrypt-1.10.0-13.el9_8.src.rpm SHA-256: c2737830c577d7c45aefa3213d770be924617a46e6ab56824edec9b6341af8d4 ppc64le libgcrypt-1.10.0-13.el9_8.ppc64le.rpm SHA-256: cd0365593ac9982a10b01b84237873a578ee715c17a27fa781451203f935df9b libgcrypt-debuginfo-1.10.0-13.el9_8.ppc64le.rpm SHA-256: aeca24e570a9711725cb4ee06a0239493011ebfa522e4d471376ca8dfb26503d libgcrypt-debuginfo-1.10.0-13.el9_8.ppc64le.rpm SHA-256: aeca24e570a9711725cb4ee06a0239493011ebfa522e4d471376ca8dfb26503d libgcrypt-debugsource-1.10.0-13.el9_8.ppc64le.rpm SHA-256: 5623853ffc9a3a30485e82b402db84527c422d8250faf7cc971877a7c7194cdb libgcrypt-debugsource-1.10.0-13.el9_8.ppc64le.rpm SHA-256: 5623853ffc9a3a30485e82b402db84527c422d8250faf7cc971