Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 477
Alerts This Week
Warning Icon 1 477

openSUSE Leap 16.0 libgcrypt Moderate Denial of Service Vuln 2026-21387-1

opensuse
Calendar Grey July 23, 2026
Scroller Opensuse
An openSUSE security update for libgcrypt addresses a moderate denial of service issue with CVE-2026-41989. Install now.
openSUSE has released a security update for libgcrypt addressing CVE-2026-41989, which could cause a denial of service, along with one bug fix for openSUSE Leap 16.0.

Description

This update for libgcrypt fixes the following issue

- CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1294=1

Topics%20covered

Topics Covered

security advisory moderate denial of service update OpenSUSE Libgcrypt

Patch

Package List

- openSUSE Leap 16.0:

libgcrypt-devel-1.12.1-160000.3.1

libgcrypt-devel-x86-64-v3-1.12.1-160000.3.1

libgcrypt20-1.12.1-160000.3.1

libgcrypt20-x86-64-v3-1.12.1-160000.3.1

References

* bsc#1262684

References:

* https://www.suse.com/security/cve/CVE-2026-41989.html

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21387-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service update OpenSUSE Libgcrypt

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.