Summary
[1.10.0-13_fips]
- Add FIPS package change: add fips suffix to Release and
set Epoch to 10 [Orabug: 35961378]
- Update FIPS module name for Oracle Linux [Orabug: 35961378]
[1.10.0-13]
- Bump version to fix wrong build target.
[1.10.0.12]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libgcrypt | 10:1.10.0-13.el9_8_fips |
| Oracle Linux · 9 | libgcrypt-devel | 10:1.10.0-13.el9_8_fips |
Vulnerabilities 1
-
Medium 6.7
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext…