Описание
Security update for libgcrypt
This update for libgcrypt fixes the following issue
- CVE-2026-41990: lack of bound check can lead to mishandling of Dilithium signing (bsc#1262693).
Список пакетов
openSUSE Leap 16.0
libgcrypt-devel-1.12.1-160000.2.1
libgcrypt-devel-x86-64-v3-1.12.1-160000.2.1
libgcrypt20-1.12.1-160000.2.1
libgcrypt20-x86-64-v3-1.12.1-160000.2.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1262693
- SUSE CVE CVE-2026-41990 page
Описание
Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
Затронутые продукты
openSUSE Leap 16.0:libgcrypt-devel-1.12.1-160000.2.1
openSUSE Leap 16.0:libgcrypt-devel-x86-64-v3-1.12.1-160000.2.1
openSUSE Leap 16.0:libgcrypt20-1.12.1-160000.2.1
openSUSE Leap 16.0:libgcrypt20-x86-64-v3-1.12.1-160000.2.1
Ссылки
- CVE-2026-41990
- SUSE Bug 1262689