Red Hat Security Advisory

RHSA-2026:47117

libgcrypt security update

Released 2026-08-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) libgcrypt-1.8.5-8.el8_10, libgcrypt-devel-1.8.5-8.el8_10

TI-2026-30383 CVE-2026-41989 · GHSA-wrv8-79m2-qg24

LOW 29

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

CVSS 3.1MEDIUM 6.7 Local No auth No interaction EPSS 0.00182 Published 2026-04-23 Fixed in 1.10.4, 1.11.3 +1 CWE-787