Summary
[ 1.8.5-8_fips]
- Add API to provide hash calculation in RSA/DSA/ECDSA signature
operations [Orabug: 33081130]
- Change Epoch from 1 to 10
[1.8.5-8]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libgcrypt | 10:1.8.5-8.el8_10_fips |
| Oracle Linux · 8 | libgcrypt-devel | 10:1.8.5-8.el8_10_fips |
Vulnerabilities 1
-
Medium 6.7
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext…