Back Linuxsecurity openSUSE: 2026:21047-1 low: libgcrypt
- CVE-2026-41990: lack of bound check can lead to mishandling of Dilithium signing (bsc#1262693).
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
zypper in -t patch openSUSE-Leap-16.0-1060=1
- openSUSE Leap 16.0:
libgcrypt-devel-1.12.1-160000.2.1
libgcrypt-devel-x86-64-v3-1.12.1-160000.2.1
libgcrypt20-1.12.1-160000.2.1
libgcrypt20-x86-64-v3-1.12.1-160000.2.1
*
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
