ELSA-2026-500138

ELSA-2026-500138 - libgcrypt security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-06

Description

[ 1.8.5-8_fips]
- Add API to provide hash calculation in RSA/DSA/ECDSA signature
operations [Orabug: 33081130]
- Change Epoch from 1 to 10

[1.8.5-8]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext

Related CVEs

CVE-2026-41989

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libgcrypt-1.8.5-8.el8_10_fips.src.rpm	cedcc0e40e5a5971ca0bfaadfb92320a94565bdface2414dd57883c5c4aa656c	-	ol8_aarch64_u4_security_validation
	libgcrypt-1.8.5-8.el8_10_fips.aarch64.rpm	d7233d18711ef818dc9fddb5e1e2ca9bc707a97609078b4f7a5624e9edfb43f3	-	ol8_aarch64_u4_security_validation
	libgcrypt-devel-1.8.5-8.el8_10_fips.aarch64.rpm	acad99bd12d8ca2663943a474c64254becceb3fc556def05b9ed919d6024c347	-	ol8_aarch64_u4_security_validation
Oracle Linux 8 (x86_64)	libgcrypt-1.8.5-8.el8_10_fips.src.rpm	cedcc0e40e5a5971ca0bfaadfb92320a94565bdface2414dd57883c5c4aa656c	-	ol8_x86_64_u4_security_validation
	libgcrypt-1.8.5-8.el8_10_fips.i686.rpm	e30600e9fd4f6cec643a266768df6c7b3cbba4aff86e6c66e4e795ed68849d82	-	ol8_x86_64_u4_security_validation
	libgcrypt-1.8.5-8.el8_10_fips.x86_64.rpm	f52c3f0588b75f6f2544a90a8f04416c60e8bfd4920f7d1dba0c6aea9058f810	-	ol8_x86_64_u4_security_validation
	libgcrypt-devel-1.8.5-8.el8_10_fips.i686.rpm	a11d0fe973697666b9e1df978229ab58c80b15cb724c291aafc01a14b005e2b8	-	ol8_x86_64_u4_security_validation
	libgcrypt-devel-1.8.5-8.el8_10_fips.x86_64.rpm	6411547a8a2dd89f394682fef5258056aba81bff3438ff70ce64d68d7143f903	-	ol8_x86_64_u4_security_validation

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team