- What: Security update for libgcrypt library
- Impact: Red Hat Enterprise Linux systems may be vulnerable to denial of service and buffer overflow attacks
Red Hat Product Errata RHSA-2026:58977 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:58977 - Security Advisory Overview Updated Packages Synopsis Moderate: libgcrypt security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libgcrypt is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2461063 - CVE-2026-41989 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVEs CVE-2026-41989 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM libgcrypt-1.8.5-7.el8_8.1.src.rpm SHA-256: 34c3c92bd4e27153b45637e18e744940bc957977e8f5937e98ab0106cdaa13e8 x86_64 libgcrypt-1.8.5-7.el8_8.1.i686.rpm SHA-256: 49a4430476ecb48070c5538973bc8aab223fc8c600a4729989ae201b70ffcd47 libgcrypt-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: b8be11c7ced094831a63dfb1dfd7ecd4e63f750a1a6809987148ee5f0d839743 libgcrypt-debuginfo-1.8.5-7.el8_8.1.i686.rpm SHA-256: 9c21b4b54d10e0567c42b10e7f40abca6b4eecc268ea80ac8b5c6ab05fcd070b libgcrypt-debuginfo-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: 5d30286540231328c8f23ef6a9e302c524a2e521f67bf6ee7032072f07d1c7e3 libgcrypt-debugsource-1.8.5-7.el8_8.1.i686.rpm SHA-256: a3071818e7b5004f92f97dd3ab14ebb884b9396193757f0eae5e97bcd6d1f29f libgcrypt-debugsource-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: 53d351d6e90c136ec9dc9c01edeb24ddd11310554fadb3c167f264444fe95353 libgcrypt-devel-1.8.5-7.el8_8.1.i686.rpm SHA-256: 6370fda6c83ea0d23735ff2e6ae7e12ddba75230eaee78f291f104cd3a2015f5 libgcrypt-devel-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: cd93d216890de352846eddbfd2ee3154f143eb188748384dbe1d0ed7bf1300c1 libgcrypt-devel-debuginfo-1.8.5-7.el8_8.1.i686.rpm SHA-256: fffd1db52a09e02e6809c05beaccedf1c30e5ef4f0fdd3edd36ec297b2857436 libgcrypt-devel-debuginfo-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: d44305b23bd873906c3893af4195a830332b5ddf829a7acd5570cef37a8ddbc6 Red Hat Enterprise Linux Server - TUS 8.8 SRPM libgcrypt-1.8.5-7.el8_8.1.src.rpm SHA-256: 34c3c92bd4e27153b45637e18e744940bc957977e8f5937e98ab0106cdaa13e8 x86_64 libgcrypt-1.8.5-7.el8_8.1.i686.rpm SHA-256: 49a4430476ecb48070c5538973bc8aab223fc8c600a4729989ae201b70ffcd47 libgcrypt-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: b8be11c7ced094831a63dfb1dfd7ecd4e63f750a1a6809987148ee5f0d839743 libgcrypt-debuginfo-1.8.5-7.el8_8.1.i686.rpm SHA-256: 9c21b4b54d10e0567c42b10e7f40abca6b4eecc268ea80ac8b5c6ab05fcd070b libgcrypt-debuginfo-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: 5d30286540231328c8f23ef6a9e302c524a2e521f67bf6ee7032072f07d1c7e3 libgcrypt-debugsource-1.8.5-7.el8_8.1.i686.rpm SHA-256: a3071818e7b5004f92f97dd3ab14ebb884b9396193757f0eae5e97bcd6d1f29f libgcrypt-debugsource-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: 53d351d6e90c136ec9dc9c01edeb24ddd11310554fadb3c167f264444fe95353 libgcrypt-devel-1.8.5-7.el8_8.1.i686.rpm SHA-256: 6370fda6c83ea0d23735ff2e6ae7e12ddba75230eaee78f291f104cd3a2015f5 libgcrypt-devel-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: cd93d216890de352846eddbfd2ee3154f143eb188748384dbe1d0ed7bf1300c1 libgcrypt-devel-debuginfo-1.8.5-7.el8_8.1.i686.rpm SHA-256: fffd1db52a09e02e6809c05beaccedf1c30e5ef4f0fdd3edd36ec297b2857436 libgcrypt-devel-debuginfo-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: d44305b23bd873906c3893af4195a830332b5ddf829a7acd5570cef37a8ddbc6 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM libgcrypt-1.8.5-7.el8_8.1.src.rpm SHA-256: 34c3c92bd4e27153b45637e18e744940bc957977e8f5937e98ab0106cdaa13e8 ppc64le libgcrypt-1.8.5-7.el8_8.1.ppc64le.rpm SHA-256: 65ab4fd2b936149af4168d7864cf07e90262f78a0da24ccbc486606aef4574df libgcrypt-debuginfo-1.8.5-7.el8_8.1.ppc64le.rpm SHA-256: 348ef0b15de4bf3d2b318362f8b22d11eeee3fb1b832515d41b64b516d5d9305 libgcrypt-debugsource-1.8.5-7.el8_8.1.ppc64le.rpm SHA-256: 9010b749ce838f55e637c69437d20ed35f6f45750d34a2e9eb92eedd8e098254 libgcrypt-devel-1.8.5-7.el8_8.1.ppc64le.rpm SHA-256: 180199d65efeabec7dbc8d0e92e211e509d15f4fa25b0bd8568599cecb45d11a libgcrypt-devel-debuginfo-1.8.5-7.el8_8.1.ppc64le.rpm SHA-256: a44772f1cef809067ff2f211afb16a719d690724694a7c23eab81cdc12416fc3 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM libgcrypt-1.8.5-7.el8_8.1.src.rpm SHA-256: 34c3c92bd4e27153b45637e18e744940bc957977e8f5937e98ab0106cdaa13e8 x86_64 libgcrypt-1.8.5-7.el8_8.1.i686.rpm SHA-256: 49a4430476ecb48070c5538973bc8aab223fc8c600a4729989ae201b70ffcd47 libgcrypt-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: b8be11c7ced094831a63dfb1dfd7ecd4e63f750a1a6809987148ee5f0d839743 libgcrypt-debuginfo-1.8.5-7.el8_8.1.i686.rpm SHA-256: 9c21b4b54d10e0567c42b10e7f40abca6b4eecc268ea80ac8b5c6ab05fcd070b libgcrypt-debuginfo-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: 5d30286540231328c8f23ef6a9e302c524a2e521f67bf6ee7032072f07d1c7e3 libgcrypt-debugsource-1.8.5-7.el8_8.1.i686.rpm SHA-256: a3071818e7b5004f92f97dd3ab14ebb884b9396193757f0eae5e97bcd6d1f29f libgcrypt-debugsource-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: 53d351d6e90c136ec9dc9c01edeb24ddd11310554fadb3c167f264444fe95353 libgcrypt-devel-1.8.5-7.el8_8.1.i686.rpm SHA-256: 6370fda6c83ea0d23735ff2e6ae7e12ddba75230eaee78f291f104cd3a2015f5 libgcrypt-devel-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: cd93d216890de352846eddbfd2ee3154f143eb188748384dbe1d0ed7bf1300c1 libgcrypt-devel-debuginfo-1.8.5-7.el8_8.1.i686.rpm SHA-256: fffd1db52a09e02e6809c05beaccedf1c30e5ef4f0fdd3edd36ec297b2857436 libgcrypt-devel-debuginfo-1.8.5-7.el8_8.1.x86_64.rpm SHA-256: d44305b23bd873906c3893af4195a830332b5ddf829a7acd5570cef37a8ddbc6 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .