- What: Security update for libgcrypt library
- Impact: Red Hat Enterprise Linux 10 users may be affected
Red Hat Product Errata RHSA-2026:50144 - Security Advisory Issued: 2026-08-04 Updated: 2026-08-04 RHSA-2026:50144 - Security Advisory Overview Updated Packages Synopsis Moderate: libgcrypt security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libgcrypt is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2461063 - CVE-2026-41989 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVEs CVE-2026-41989 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM libgcrypt-1.11.0-7.el10_2.src.rpm SHA-256: 4fc678e7b6afeec18692965d4a36f6d8a764d4905995edb6de87f8f1e75890a9 x86_64 libgcrypt-1.11.0-7.el10_2.x86_64.rpm SHA-256: 935fd4985b81c163c5963cf6e0664d241e713dae88699d838480e1da9960eeda libgcrypt-debuginfo-1.11.0-7.el10_2.x86_64.rpm SHA-256: a1986eedaaba9a2508b76b8a048008b272bfb91bea59205a131de9cee70dfa80 libgcrypt-debuginfo-1.11.0-7.el10_2.x86_64.rpm SHA-256: a1986eedaaba9a2508b76b8a048008b272bfb91bea59205a131de9cee70dfa80 libgcrypt-debugsource-1.11.0-7.el10_2.x86_64.rpm SHA-256: 032ccf9709d620eacb5d72da6bd4f5ea65047dc1247e853813ddb5721f054abe libgcrypt-debugsource-1.11.0-7.el10_2.x86_64.rpm SHA-256: 032ccf9709d620eacb5d72da6bd4f5ea65047dc1247e853813ddb5721f054abe libgcrypt-devel-1.11.0-7.el10_2.x86_64.rpm SHA-256: c911fdeb9287ddf9f5c6bce30f4a185d0f3efea05ac99c16ab299ca9ff8477e5 libgcrypt-devel-debuginfo-1.11.0-7.el10_2.x86_64.rpm SHA-256: 86c91cc2600a52820854377eec1d81cbd17a27794204ea5e8e1ce3724c365797 libgcrypt-devel-debuginfo-1.11.0-7.el10_2.x86_64.rpm SHA-256: 86c91cc2600a52820854377eec1d81cbd17a27794204ea5e8e1ce3724c365797 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM libgcrypt-1.11.0-7.el10_2.src.rpm SHA-256: 4fc678e7b6afeec18692965d4a36f6d8a764d4905995edb6de87f8f1e75890a9 x86_64 libgcrypt-1.11.0-7.el10_2.x86_64.rpm SHA-256: 935fd4985b81c163c5963cf6e0664d241e713dae88699d838480e1da9960eeda libgcrypt-debuginfo-1.11.0-7.el10_2.x86_64.rpm SHA-256: a1986eedaaba9a2508b76b8a048008b272bfb91bea59205a131de9cee70dfa80 libgcrypt-debuginfo-1.11.0-7.el10_2.x86_64.rpm SHA-256: a1986eedaaba9a2508b76b8a048008b272bfb91bea59205a131de9cee70dfa80 libgcrypt-debugsource-1.11.0-7.el10_2.x86_64.rpm SHA-256: 032ccf9709d620eacb5d72da6bd4f5ea65047dc1247e853813ddb5721f054abe libgcrypt-debugsource-1.11.0-7.el10_2.x86_64.rpm SHA-256: 032ccf9709d620eacb5d72da6bd4f5ea65047dc1247e853813ddb5721f054abe libgcrypt-devel-1.11.0-7.el10_2.x86_64.rpm SHA-256: c911fdeb9287ddf9f5c6bce30f4a185d0f3efea05ac99c16ab299ca9ff8477e5 libgcrypt-devel-debuginfo-1.11.0-7.el10_2.x86_64.rpm SHA-256: 86c91cc2600a52820854377eec1d81cbd17a27794204ea5e8e1ce3724c365797 libgcrypt-devel-debuginfo-1.11.0-7.el10_2.x86_64.rpm SHA-256: 86c91cc2600a52820854377eec1d81cbd17a27794204ea5e8e1ce3724c365797 Red Hat Enterprise Linux for IBM z Systems 10 SRPM libgcrypt-1.11.0-7.el10_2.src.rpm SHA-256: 4fc678e7b6afeec18692965d4a36f6d8a764d4905995edb6de87f8f1e75890a9 s390x libgcrypt-1.11.0-7.el10_2.s390x.rpm SHA-256: 7e1badad4af3bc75029b06420093d1ee727e825237aeb25462a467fe3dc5acce libgcrypt-debuginfo-1.11.0-7.el10_2.s390x.rpm SHA-256: 50fae809519362a7b643182e64a46b942a82ef5f627d42c58ee4864ff03d1c23 libgcrypt-debuginfo-1.11.0-7.el10_2.s390x.rpm SHA-256: 50fae809519362a7b643182e64a46b942a82ef5f627d42c58ee4864ff03d1c23 libgcrypt-debugsource-1.11.0-7.el10_2.s390x.rpm SHA-256: 57f4cc79fdc4dd431e5e2d22821b8d2376aa1e3d74902c9a5d3f69fe6dd4c18d libgcrypt-debugsource-1.11.0-7.el10_2.s390x.rpm SHA-256: 57f4cc79fdc4dd431e5e2d22821b8d2376aa1e3d74902c9a5d3f69fe6dd4c18d libgcrypt-devel-1.11.0-7.el10_2.s390x.rpm SHA-256: 88cb9d7e4fdaee65d147a71a2f2ff8298d8b53e3a827a0822e4e17faf406a55b libgcrypt-devel-debuginfo-1.11.0-7.el10_2.s390x.rpm SHA-256: e5817a62415940300de110bd00bbb5a7ec04139c00bfc178d646952d5f8e7beb libgcrypt-devel-debuginfo-1.11.0-7.el10_2.s390x.rpm SHA-256: e5817a62415940300de110bd00bbb5a7ec04139c00bfc178d646952d5f8e7beb Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM libgcrypt-1.11.0-7.el10_2.src.rpm SHA-256: 4fc678e7b6afeec18692965d4a36f6d8a764d4905995edb6de87f8f1e75890a9 s390x libgcrypt-1.11.0-7.el10_2.s390x.rpm SHA-256: 7e1badad4af3bc75029b06420093d1ee727e825237aeb25462a467fe3dc5acce libgcrypt-debuginfo-1.11.0-7.el10_2.s390x.rpm SHA-256: 50fae809519362a7b643182e64a46b942a82ef5f627d42c58ee4864ff03d1c23 libgcrypt-debuginfo-1.11.0-7.el10_2.s390x.rpm SHA-256: 50fae809519362a7b643182e64a46b942a82ef5f627d42c58ee4864ff03d1c23 libgcrypt-debugsource-1.11.0-7.el10_2.s390x.rpm SHA-256: 57f4cc79fdc4dd431e5e2d22821b8d2376aa1e3d74902c9a5d3f69fe6dd4c18d libgcrypt-debugsource-1.11.0-7.el10_2.s390x.rpm SHA-256: 57f4cc79fdc4dd431e5e2d22821b8d2376aa1e3d74902c9a5d3f69fe6dd4c18d libgcrypt-devel-1.11.0-7.el10_2.s390x.rpm SHA-256: 88cb9d7e4fdaee65d147a71a2f2ff8298d8b53e3a827a0822e4e17faf406a55b libgcrypt-devel-debuginfo-1.11.0-7.el10_2.s390x.rpm SHA-256: e5817a62415940300de110bd00bbb5a7ec04139c00bfc178d646952d5f8e7beb libgcrypt-devel-debuginfo-1.11.0-7.el10_2.s390x.rpm SHA-256: e5817a62415940300de110bd00bbb5a7ec04139c00bfc178d646952d5f8e7beb Red Hat Enterprise Linux for Power, little endian 10 SRPM libgcrypt-1.11.0-7.el10_2.src.rpm SHA-256: 4fc678e7b6afeec18692965d4a36f6d8a764d4905995edb6de87f8f1e75890a9 ppc64le libgcrypt-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 2e9e2abe8d8f025bc767e2b30171da1e0bd53cd74bb3ab88e8ad87b405eaaefc libgcrypt-debuginfo-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 45867edd5ca8f638a468e27508f67883f87f0979c70cd0a4e30d5e1a5a368998 libgcrypt-debuginfo-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 45867edd5ca8f638a468e27508f67883f87f0979c70cd0a4e30d5e1a5a368998 libgcrypt-debugsource-1.11.0-7.el10_2.ppc64le.rpm SHA-256: ffef1f30660d98b2c61b093a729cdcc3787a00618c9e3fadec784e60a862d1eb libgcrypt-debugsource-1.11.0-7.el10_2.ppc64le.rpm SHA-256: ffef1f30660d98b2c61b093a729cdcc3787a00618c9e3fadec784e60a862d1eb libgcrypt-devel-1.11.0-7.el10_2.ppc64le.rpm SHA-256: cf266d4c63c0608fbc19eb6e9774ec5b1da999e9d88e7ba4aef9ebdc14caac65 libgcrypt-devel-debuginfo-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 371d7310cb4f1c2bb7632ae0295a370949d7d493f0287e14e57310db61809820 libgcrypt-devel-debuginfo-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 371d7310cb4f1c2bb7632ae0295a370949d7d493f0287e14e57310db61809820 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM libgcrypt-1.11.0-7.el10_2.src.rpm SHA-256: 4fc678e7b6afeec18692965d4a36f6d8a764d4905995edb6de87f8f1e75890a9 ppc64le libgcrypt-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 2e9e2abe8d8f025bc767e2b30171da1e0bd53cd74bb3ab88e8ad87b405eaaefc libgcrypt-debuginfo-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 45867edd5ca8f638a468e27508f67883f87f0979c70cd0a4e30d5e1a5a368998 libgcrypt-debuginfo-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 45867edd5ca8f638a468e27508f67883f87f0979c70cd0a4e30d5e1a5a368998 libgcrypt-debugsource-1.11.0-7.el10_2.ppc64le.rpm SHA-256: ffef1f30660d98b2c61b093a729cdcc3787a00618c9e3fadec784e60a862d1eb libgcrypt-debugsource-1.11.0-7.el10_2.ppc64le.rpm SHA-256: ffef1f30660d98b2c61b093a729cdcc3787a00618c9e3fadec784e60a862d1eb libgcrypt-devel-1.11.0-7.el10_2.ppc64le.rpm SHA-256: cf266d4c63c0608fbc19eb6e9774ec5b1da999e9d88e7ba4aef9ebdc14caac65 libgcrypt-devel-debuginfo-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 371d7310cb4f1c2bb7632ae0295a370949d7d493f0287e14e57310db61809820 libgcrypt-devel-debuginfo-1.11.0-7.el10_2.ppc64le.rpm SHA-256: 371d7310cb4f1c2bb7632ae0295a370949d7d493f0287e14e57310db61809820 Red Hat Enterprise Linux for ARM 64 10 SRPM libgcrypt-1.11.0-7.el10_2.src.rpm SHA-256: 4fc678e7b6afeec18692965d4a36f6d8a764d4905995edb6de87f8f1e75890a9 aarch64 libgcrypt-1.11.0-7.el10_2.aarch64.rpm SHA-256: c44911b5b4dd7be6c2c23bd9afd9e7feab18d501cbf2a35bae5ac4107097d539 libgcrypt-debuginfo-1.11.0-7.el10_2.aarch64.rpm SHA-256: 2493c26c4a9cbd