Most recent entries from all

ALSA-2026:47117 — Moderate: libgcrypt security update

Affected: AlmaLinux:8: libgcrypt, AlmaLinux:8: libgcrypt-devel

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

Security Fix(es):

* Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-07879

BELL-CVE-2026-41989

Affected: Alpaquita:23: libgcrypt, Alpaquita:25: libgcrypt, Alpaquita:stream: libgcrypt, BellSoft Hardened Containers:23: libgcrypt

certfr-2026-avi-0519 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque…

certfr-2026-avi-0519

EUVD-2026-364783

fkie_cve-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

GHSA-wrv8-79m2-qg24

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

ICSA-26-209-04 — Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).

Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

msrc_CVE-2026-41989 — CVE-2026-41989

msrc_CVE-2026-41989

NCSC-2026-0375 — Kwetsbaarheden verholpen in Oracle Communications

NCSC-2026-0375

OESA-2026-2345 — libgcrypt security update

Affected: openEuler:24.03-LTS-SP3: libgcrypt

Libgcrypt is a general purpose cryptographic library originally based on code from GnuPG. Security Fix(es):

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.(CVE-2026-41989)

openSUSE-SU-2026:21387-1 — Security update for libgcrypt

Security update for libgcrypt

RHSA-2026:52951 — Red Hat Security Advisory: libgcrypt security update

Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

RLSA-2026:47117 — Moderate: libgcrypt security update

Affected: Rocky Linux:8: libgcrypt

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

Security Fix(es):

* Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SSA-019113 — SSA-019113: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

SUSE-SU-2026:22760-1 — Security update for libgcrypt

Security update for libgcrypt

UBUNTU-CVE-2026-41989

Affected: Ubuntu:Pro:16.04:LTS: libgcrypt20, Ubuntu:18.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS-updates:18.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS:18.04:LTS: libgcrypt20, Ubuntu:20.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS-updates:20.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS:20.04:LTS: libgcrypt20, Ubuntu:22.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS-preview:22.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS-updates:22.04:LTS: libgcrypt20 and 4 more

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

WID-SEC-W-2026-1267 — Red Hat Hardened Images RPMs: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Rechte zu erweitern, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.