Описание
ELSA-2026-500138: libgcrypt security update (MODERATE)
[ 1.8.5-8_fips]
- Add API to provide hash calculation in RSA/DSA/ECDSA signature operations [Orabug: 33081130]
- Change Epoch from 1 to 10
[1.8.5-8]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
libgcrypt
1.8.5-8.el8_10_fips
libgcrypt-devel
1.8.5-8.el8_10_fips
Oracle Linux x86_64
libgcrypt
1.8.5-8.el8_10_fips
libgcrypt-devel
1.8.5-8.el8_10_fips
Связанные CVE
Связанные уязвимости
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow ...