Summary
[1.8.5-8]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libgcrypt | 0:1.8.5-8.el8_10 |
| Oracle Linux · 8 | libgcrypt-devel | 0:1.8.5-8.el8_10 |
Vulnerabilities 1
-
Medium 6.7
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext…