Security News

Cybersecurity news aggregator

🔄
INFO Updates Red Hat Errata

RHSA-2026:47117: Moderate: libgcrypt security update

  • What: Red Hat releases libgcrypt security update
  • Impact: Fixes denial of service and buffer overflow vulnerability
Read Full Article →

Red Hat Product Errata RHSA-2026:47117 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47117 - Security Advisory Overview Updated Packages Synopsis Moderate: libgcrypt security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libgcrypt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2461063 - CVE-2026-41989 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVEs CVE-2026-41989 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM libgcrypt-1.8.5-8.el8_10.src.rpm SHA-256: 5501ad64cc36ae54b7c0c22ea47f8758369fed3b0d18309d74fb3ca8ddb2397a x86_64 libgcrypt-1.8.5-8.el8_10.i686.rpm SHA-256: d6752789e2a297349ca4deea53249c8c6d37bd1bb3a16ff91bfa5f7ecba654e1 libgcrypt-1.8.5-8.el8_10.x86_64.rpm SHA-256: efff0ccb63fbdaf0e23242e8e3b282b8329ad4e7753f268cf848d00b2738301e libgcrypt-debuginfo-1.8.5-8.el8_10.i686.rpm SHA-256: f1e752391ea8596e67fd003a35bf52144e603d1b480d5a3d473b8339c5307a3f libgcrypt-debuginfo-1.8.5-8.el8_10.x86_64.rpm SHA-256: c611469d4a010162c095cfe67843c82f411eae019236630cbcc19cb80dfa409a libgcrypt-debugsource-1.8.5-8.el8_10.i686.rpm SHA-256: e1f9f12235521f56284e987b754085bb0b8061af6eb0fb4e9c1cc64fe61a3841 libgcrypt-debugsource-1.8.5-8.el8_10.x86_64.rpm SHA-256: ccd0ceba39c1f62291a27ccf7db0d14accf54931470ab0d1a0b11643d2ae1da0 libgcrypt-devel-1.8.5-8.el8_10.i686.rpm SHA-256: 875db8530f43362799229a09beec3b1cef7f353ddfad8ea203f7030e941336a5 libgcrypt-devel-1.8.5-8.el8_10.x86_64.rpm SHA-256: 78bac84905f93d6f281bd93994a93c74564395de9cadf3482347c34cc9770ecf libgcrypt-devel-debuginfo-1.8.5-8.el8_10.i686.rpm SHA-256: bf40f052474f07617b48a8dabdd6b0d568651772b618e629ef357eaf09b87e3a libgcrypt-devel-debuginfo-1.8.5-8.el8_10.x86_64.rpm SHA-256: af1b3452ebf007a348b7de6762a5fa01239f5d1c8e06825cfd733b6fbcdb6623 Red Hat Enterprise Linux for IBM z Systems 8 SRPM libgcrypt-1.8.5-8.el8_10.src.rpm SHA-256: 5501ad64cc36ae54b7c0c22ea47f8758369fed3b0d18309d74fb3ca8ddb2397a s390x libgcrypt-1.8.5-8.el8_10.s390x.rpm SHA-256: 009071f5c89aeacd59d78df30c2fdc413f5d2c0740636ab09a79705d1625a218 libgcrypt-debuginfo-1.8.5-8.el8_10.s390x.rpm SHA-256: c06f28299dc66a5b847ea565a37fbca1c8319cfd482f2a7e86c1a50845672638 libgcrypt-debugsource-1.8.5-8.el8_10.s390x.rpm SHA-256: 57a9c1cf4cc53f6e4ba953aa606d8da86f214cb00828820745b0dc9a68ff3139 libgcrypt-devel-1.8.5-8.el8_10.s390x.rpm SHA-256: 4a4dce4f9c747995a4f59234fe1b9303e06b9a5d7f9bacd6c98381ea97c9933a libgcrypt-devel-debuginfo-1.8.5-8.el8_10.s390x.rpm SHA-256: 3e5c1c4349e4adcf048697bbc8893ed49a13131bbab9bce84552443e51488fce Red Hat Enterprise Linux for Power, little endian 8 SRPM libgcrypt-1.8.5-8.el8_10.src.rpm SHA-256: 5501ad64cc36ae54b7c0c22ea47f8758369fed3b0d18309d74fb3ca8ddb2397a ppc64le libgcrypt-1.8.5-8.el8_10.ppc64le.rpm SHA-256: c893ebc0c42bfc49fbf4f819818d275c5dd690982b682d6bfad87c9b3af7dc63 libgcrypt-debuginfo-1.8.5-8.el8_10.ppc64le.rpm SHA-256: 2414e97feb1be9bf6f5b24cdad274073ecee572ae68c41ddc0fd9bb1f36c39bb libgcrypt-debugsource-1.8.5-8.el8_10.ppc64le.rpm SHA-256: 1d831eb0157484088ba0df0144266245d2aa6defdfab2bea72fd625679feb9c6 libgcrypt-devel-1.8.5-8.el8_10.ppc64le.rpm SHA-256: cc52557e43bee2a9244c398732f6fe766c6ddd006dac823d95cb869ef946fdc1 libgcrypt-devel-debuginfo-1.8.5-8.el8_10.ppc64le.rpm SHA-256: fdda6a3c6f367f13e418374d057fa711fe44420eb9cdac468decbb10707fd908 Red Hat Enterprise Linux for ARM 64 8 SRPM libgcrypt-1.8.5-8.el8_10.src.rpm SHA-256: 5501ad64cc36ae54b7c0c22ea47f8758369fed3b0d18309d74fb3ca8ddb2397a aarch64 libgcrypt-1.8.5-8.el8_10.aarch64.rpm SHA-256: 237b6e412cfb770bb064add9bc559ae3e34f308cb6d1c95af175c1238888361c libgcrypt-debuginfo-1.8.5-8.el8_10.aarch64.rpm SHA-256: 00f56a64fb5d5071e71e799e0ebff7f41b8f70034fa620e655bbe2dbb84cbbff libgcrypt-debugsource-1.8.5-8.el8_10.aarch64.rpm SHA-256: 719b1f8ca0346e020a71e9f0646fde4505d8eb3bc1e2b443371d1b3130216902 libgcrypt-devel-1.8.5-8.el8_10.aarch64.rpm SHA-256: 21cd00cb47e76615e5da12057c48f34b022ed67d0a3cd861c025d7e4986fa73d libgcrypt-devel-debuginfo-1.8.5-8.el8_10.aarch64.rpm SHA-256: 849711dc31eb0b0bdbfd98218cee7d409d64e9769b50409a2a92ca788fb7453e Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM libgcrypt-1.8.5-8.el8_10.src.rpm SHA-256: 5501ad64cc36ae54b7c0c22ea47f8758369fed3b0d18309d74fb3ca8ddb2397a x86_64 libgcrypt-1.8.5-8.el8_10.i686.rpm SHA-256: d6752789e2a297349ca4deea53249c8c6d37bd1bb3a16ff91bfa5f7ecba654e1 libgcrypt-1.8.5-8.el8_10.x86_64.rpm SHA-256: efff0ccb63fbdaf0e23242e8e3b282b8329ad4e7753f268cf848d00b2738301e libgcrypt-debuginfo-1.8.5-8.el8_10.i686.rpm SHA-256: f1e752391ea8596e67fd003a35bf52144e603d1b480d5a3d473b8339c5307a3f libgcrypt-debuginfo-1.8.5-8.el8_10.x86_64.rpm SHA-256: c611469d4a010162c095cfe67843c82f411eae019236630cbcc19cb80dfa409a libgcrypt-debugsource-1.8.5-8.el8_10.i686.rpm SHA-256: e1f9f12235521f56284e987b754085bb0b8061af6eb0fb4e9c1cc64fe61a3841 libgcrypt-debugsource-1.8.5-8.el8_10.x86_64.rpm SHA-256: ccd0ceba39c1f62291a27ccf7db0d14accf54931470ab0d1a0b11643d2ae1da0 libgcrypt-devel-1.8.5-8.el8_10.i686.rpm SHA-256: 875db8530f43362799229a09beec3b1cef7f353ddfad8ea203f7030e941336a5 libgcrypt-devel-1.8.5-8.el8_10.x86_64.rpm SHA-256: 78bac84905f93d6f281bd93994a93c74564395de9cadf3482347c34cc9770ecf libgcrypt-devel-debuginfo-1.8.5-8.el8_10.i686.rpm SHA-256: bf40f052474f07617b48a8dabdd6b0d568651772b618e629ef357eaf09b87e3a libgcrypt-devel-debuginfo-1.8.5-8.el8_10.x86_64.rpm SHA-256: af1b3452ebf007a348b7de6762a5fa01239f5d1c8e06825cfd733b6fbcdb6623 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM libgcrypt-1.8.5-8.el8_10.src.rpm SHA-256: 5501ad64cc36ae54b7c0c22ea47f8758369fed3b0d18309d74fb3ca8ddb2397a aarch64 libgcrypt-1.8.5-8.el8_10.aarch64.rpm SHA-256: 237b6e412cfb770bb064add9bc559ae3e34f308cb6d1c95af175c1238888361c libgcrypt-debuginfo-1.8.5-8.el8_10.aarch64.rpm SHA-256: 00f56a64fb5d5071e71e799e0ebff7f41b8f70034fa620e655bbe2dbb84cbbff libgcrypt-debugsource-1.8.5-8.el8_10.aarch64.rpm SHA-256: 719b1f8ca0346e020a71e9f0646fde4505d8eb3bc1e2b443371d1b3130216902 libgcrypt-devel-1.8.5-8.el8_10.aarch64.rpm SHA-256: 21cd00cb47e76615e5da12057c48f34b022ed67d0a3cd861c025d7e4986fa73d libgcrypt-devel-debuginfo-1.8.5-8.el8_10.aarch64.rpm SHA-256: 849711dc31eb0b0bdbfd98218cee7d409d64e9769b50409a2a92ca788fb7453e Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM libgcrypt-1.8.5-8.el8_10.src.rpm SHA-256: 5501ad64cc36ae54b7c0c22ea47f8758369fed3b0d18309d74fb3ca8ddb2397a ppc64le libgcrypt-1.8.5-8.el8_10.ppc64le.rpm SHA-256: c893ebc0c42bfc49fbf4f819818d275c5dd690982b682d6bfad87c9b3af7dc63 libgcrypt-debuginfo-1.8.5-8.el8_10.ppc64le.rpm SHA-256: 2414e97feb1be9bf6f5b24cdad274073ecee572ae68c41ddc0fd9bb1f36c39bb libgcrypt-debugsource-1.8.5-8.el8_10.ppc64le.rpm SHA-256: 1d831eb0157484088ba0df0144266245d2aa6defdfab2bea72fd625679feb9c6 libgcrypt-devel-1.8.5-8.el8_10.ppc64le.rpm SHA-256: cc52557e43bee2a9244c398732f6fe766c6ddd006dac823d95cb869ef946fdc1 libgcrypt-devel-debuginfo-1.8.5-8.el8_10.ppc64le.rpm SHA-256: fdda6a3c6f367f13e418374d057fa711fe44420eb9cdac468decbb10707fd908 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 SRPM libgcrypt-1.8.5-8.el8_10.src.rpm SHA-256: 5501ad64cc36ae54b7c0c22ea47f8758369fed3b0d18309d74fb3ca8ddb2397a s390x libgcrypt-1.8.5-8.el8_10.s390x.rpm SHA-256: 009071f5c89aeacd59d78df30c2fdc413f5d2c0740636ab09a79705d1625a218 libgcrypt-debuginfo-1.8.5-8.el8_10.s390x.rpm SHA-256: c06f28299dc66a5b847ea565a37fbca1c8319cfd482f2a7e86c1a50845672638 libgcrypt-debugsource-1.8.5-8.el8_10.s390x.rpm SHA-256: 57a9c1cf4cc53f6e4ba953aa606d8da86f214cb00828820745b0dc9a68ff3139 libgcrypt-devel-1.8.5-8.el8_10.s390x.rpm SHA-256: 4a4dce4f9c747995a4f59234fe1b9303e06b9a5d7f9bacd6c98381ea97c9933a libgcrypt-devel-debuginfo-1.8.5-8.el8_10.s390x.rpm SHA-256: 3e5c1c4349e4adcf048697bbc8893ed49a13131bbab9bce84552443e51488fce The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .

Share this article