Red Hat Security Advisory

RHSA-2026:8466

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-04-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images libgcrypt-1.12.2-1.hum1@aarch64, libgcrypt-1.12.2-1.hum1@src, libgcrypt-1.12.2-1.hum1@x86_64 +2

TI-2026-30383 CVE-2026-41989 · GHSA-wrv8-79m2-qg24

LOW 29

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

CVSS 3.1MEDIUM 6.7 Local No auth No interaction EPSS 0.00182 Published 2026-04-23 Fixed in 1.10.4, 1.11.3 +1 CWE-787

TI-2026-30384 CVE-2026-41990 · GHSA-78pv-qq8x-94px

LOW 18

Libgcrypt before 1.12.2 mishandles Dilithium signing.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00229 Published 2026-04-23 Partial fix · 1.12.2 CWE-787