Описание
Security update for libgcrypt
This update for libgcrypt fixes the following issue
- CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
Список пакетов
openSUSE Leap 16.0
libgcrypt-devel-1.12.1-160000.3.1
libgcrypt-devel-x86-64-v3-1.12.1-160000.3.1
libgcrypt20-1.12.1-160000.3.1
libgcrypt20-x86-64-v3-1.12.1-160000.3.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1262684
- SUSE CVE CVE-2026-41989 page
Описание
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Затронутые продукты
openSUSE Leap 16.0:libgcrypt-devel-1.12.1-160000.3.1
openSUSE Leap 16.0:libgcrypt-devel-x86-64-v3-1.12.1-160000.3.1
openSUSE Leap 16.0:libgcrypt20-1.12.1-160000.3.1
openSUSE Leap 16.0:libgcrypt20-x86-64-v3-1.12.1-160000.3.1
Ссылки
- CVE-2026-41989
- SUSE Bug 1262682