ELSA-2026-500145

ELSA-2026-500145 - libgcrypt security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-07

Description

[1.10.0-13_fips]
- Add FIPS package change: add fips suffix to Release and
set Epoch to 10 [Orabug: 35961378]
- Update FIPS module name for Oracle Linux [Orabug: 35961378]

[1.10.0-13]
- Bump version to fix wrong build target.

[1.10.0.12]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext

Related CVEs

CVE-2026-41989

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	libgcrypt-1.10.0-13.el9_8_fips.src.rpm	256ab18a3b5ff7f30ed76a8494cd59d84bc74071b75fe0f377dbae41107d9bc3	-	ol9_aarch64_u3_security_validation
	libgcrypt-1.10.0-13.el9_8_fips.aarch64.rpm	bd6aa09b160d7c9494c6d43ee48493e9c7fb2f624d70a0fb41d787042ef999cb	-	ol9_aarch64_u3_security_validation
	libgcrypt-devel-1.10.0-13.el9_8_fips.aarch64.rpm	d0fbcb320812ca4ca6f352859defe8baa96b833541b156c1c2cca73012b656a6	-	ol9_aarch64_u3_security_validation
Oracle Linux 9 (x86_64)	libgcrypt-1.10.0-13.el9_8_fips.src.rpm	256ab18a3b5ff7f30ed76a8494cd59d84bc74071b75fe0f377dbae41107d9bc3	-	ol9_x86_64_u3_security_validation
	libgcrypt-1.10.0-13.el9_8_fips.i686.rpm	e303239a218e56c0a34b132c8a4994ba3b046ca3c4b88dced671aac92df7afe4	-	ol9_x86_64_u3_security_validation
	libgcrypt-1.10.0-13.el9_8_fips.x86_64.rpm	6217493747ee41b6864ff8cb42ce0ee4c876b66be7a437b4bdca9a0688d54916	-	ol9_x86_64_u3_security_validation
	libgcrypt-devel-1.10.0-13.el9_8_fips.i686.rpm	9a844cf1600033619bff5ed265f9a4ac56f3f897ae8c7e3a74e797193829b934	-	ol9_x86_64_u3_security_validation
	libgcrypt-devel-1.10.0-13.el9_8_fips.x86_64.rpm	458291cf7d1f473a0822a5c551427222b09fe184715ee54a265f6cb3154ca3e1	-	ol9_x86_64_u3_security_validation

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team