Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:47117

Опубликовано: 12 авг. 2026
Источник: rocky
Оценка: Moderate

Описание

Moderate: libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

Security Fix(es):

  • Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
libgcryptaarch648.el8_10libgcrypt-1.8.5-8.el8_10.aarch64.rpm
libgcrypt-develaarch648.el8_10libgcrypt-devel-1.8.5-8.el8_10.aarch64.rpm
libgcryptx86_648.el8_10libgcrypt-1.8.5-8.el8_10.x86_64.rpm
libgcrypti6868.el8_10libgcrypt-1.8.5-8.el8_10.i686.rpm
libgcrypt-develi6868.el8_10libgcrypt-devel-1.8.5-8.el8_10.i686.rpm
libgcrypt-develx86_648.el8_10libgcrypt-devel-1.8.5-8.el8_10.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 6.7
ubuntu
7 месяцев назад

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

CVSS3: 7.5
redhat
7 месяцев назад

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

CVSS3: 6.7
nvd
7 месяцев назад

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

CVSS3: 4
msrc
7 месяцев назад

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

CVSS3: 6.7
debian
7 месяцев назад

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow ...