- What: Security update for libgcrypt library
- Impact: Red Hat Enterprise Linux systems may be vulnerable to denial of service and buffer overflow attacks
Red Hat Product Errata RHSA-2026:58978 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:58978 - Security Advisory Overview Updated Packages Synopsis Moderate: libgcrypt security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libgcrypt is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2461063 - CVE-2026-41989 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVEs CVE-2026-41989 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 SRPM libgcrypt-1.8.5-7.el8_6.1.src.rpm SHA-256: 257e5a4be0c8f8841c2b768c347d748f15a6fe2529b36363c6f406d7752dcbe5 x86_64 libgcrypt-1.8.5-7.el8_6.1.i686.rpm SHA-256: 9d1914b1036146d4cea1e326c1d901e6eb727611f556d280e40c80cbf31623fa libgcrypt-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: 7a53ead325f303277da301364955a46f2b02c16d0d75a1fc7e64f00f61ffc864 libgcrypt-debuginfo-1.8.5-7.el8_6.1.i686.rpm SHA-256: 28d0031047f905fb1af7a734e9af41bba13f68824e98f6c7a62b50b90b609748 libgcrypt-debuginfo-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: ebdd881972e81ed86f9e3c4e01d4dfdb7bf974d98791e5d1fbda19a62c0a9f61 libgcrypt-debugsource-1.8.5-7.el8_6.1.i686.rpm SHA-256: 45807a68c415fded9fcaa9e7a53cd772a5dd833d7aa0d1aa106162c25cd03ab1 libgcrypt-debugsource-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: d9ce0d097d5fe5ed60455785dbafaadd837c2343b92c046191551c8b1a2e773c libgcrypt-devel-1.8.5-7.el8_6.1.i686.rpm SHA-256: 97983da1c28a00aefdad6236185c9d4af1c577e2c268c84cd0c312da5c2b0504 libgcrypt-devel-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: 3fdc7dc2fce2cb98d12aba3870d66cb1fc9db2ae9bc68b1e1b79e85ebf1a1af1 libgcrypt-devel-debuginfo-1.8.5-7.el8_6.1.i686.rpm SHA-256: 685f619f81eff05feed346f083a40946aaccec90e8227dfe41e5e43d2427b6ad libgcrypt-devel-debuginfo-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: 805527ee8e47a7691c5b1d4365e7aab8e3f1b9c52766de4f3e668f8da3003a50 Red Hat Enterprise Linux Server - AUS 8.6 SRPM libgcrypt-1.8.5-7.el8_6.1.src.rpm SHA-256: 257e5a4be0c8f8841c2b768c347d748f15a6fe2529b36363c6f406d7752dcbe5 x86_64 libgcrypt-1.8.5-7.el8_6.1.i686.rpm SHA-256: 9d1914b1036146d4cea1e326c1d901e6eb727611f556d280e40c80cbf31623fa libgcrypt-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: 7a53ead325f303277da301364955a46f2b02c16d0d75a1fc7e64f00f61ffc864 libgcrypt-debuginfo-1.8.5-7.el8_6.1.i686.rpm SHA-256: 28d0031047f905fb1af7a734e9af41bba13f68824e98f6c7a62b50b90b609748 libgcrypt-debuginfo-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: ebdd881972e81ed86f9e3c4e01d4dfdb7bf974d98791e5d1fbda19a62c0a9f61 libgcrypt-debugsource-1.8.5-7.el8_6.1.i686.rpm SHA-256: 45807a68c415fded9fcaa9e7a53cd772a5dd833d7aa0d1aa106162c25cd03ab1 libgcrypt-debugsource-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: d9ce0d097d5fe5ed60455785dbafaadd837c2343b92c046191551c8b1a2e773c libgcrypt-devel-1.8.5-7.el8_6.1.i686.rpm SHA-256: 97983da1c28a00aefdad6236185c9d4af1c577e2c268c84cd0c312da5c2b0504 libgcrypt-devel-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: 3fdc7dc2fce2cb98d12aba3870d66cb1fc9db2ae9bc68b1e1b79e85ebf1a1af1 libgcrypt-devel-debuginfo-1.8.5-7.el8_6.1.i686.rpm SHA-256: 685f619f81eff05feed346f083a40946aaccec90e8227dfe41e5e43d2427b6ad libgcrypt-devel-debuginfo-1.8.5-7.el8_6.1.x86_64.rpm SHA-256: 805527ee8e47a7691c5b1d4365e7aab8e3f1b9c52766de4f3e668f8da3003a50 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .