Описание
ELSA-2026-500145: libgcrypt security update (MODERATE)
[1.10.0-13_fips]
- Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35961378]
- Update FIPS module name for Oracle Linux [Orabug: 35961378]
[1.10.0-13]
- Bump version to fix wrong build target.
[1.10.0.12]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
libgcrypt
1.10.0-13.el9_8_fips
libgcrypt-devel
1.10.0-13.el9_8_fips
Oracle Linux x86_64
libgcrypt
1.10.0-13.el9_8_fips
libgcrypt-devel
1.10.0-13.el9_8_fips
Связанные CVE
Связанные уязвимости
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow ...