Back Linuxsecurity

openSUSE libgcrypt Denial of Service Vulnerability CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 2, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

This update for libgcrypt fixes the following issue:

* CVE-2026-41989: crafted ECDH ciphertext can lead denial of service

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Micro for Rancher 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2026-3921=1

* SUSE Linux Enterprise Micro 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2026-3921=1

zypper in -t patch SUSE-2026-3921=1

* SUSE Linux Enterprise Micro for Rancher 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2026-3921=1

* SUSE Linux Enterprise Micro 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2026-3921=1

* SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64)

* libgcrypt20-hmac-1.9.4-150400.6.14.1

* libgcrypt20-debuginfo-1.9.4-150400.6.14.1

* libgcrypt-debugsource-1.9.4-150400.6.14.1

* libgcrypt20-1.9.4-150400.6.14.1

* SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64)

* libgcrypt20-hmac-1.9.4-150400.6.14.1

* libgcrypt20-debuginfo-1.9.4-150400.6.14.1

* libgcrypt-debugsource-1.9.4-150400.6.14.1

* libgcrypt20-1.9.4-150400.6.14.1

* openSUSE Leap 15.4 (x86_64)

* libgcrypt20-32bit-1.9.4-150400.6.14.1

* libgcrypt20-hmac-32bit-1.9.4-150400.6.14.1

* libgcrypt-devel-32bit-debuginfo-1.9.4-150400.6.14.1

* libgcrypt20-32bit-debuginfo-1.9.4-150400.6.14.1

* libgcrypt-devel-32bit-1.9.4-150400.6.14.1

* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)

* libgcrypt-debugsource-1.9.4-150400.6.14.1

* libgcrypt20-hmac-1.9.4-150400.6.14.1

* libgcrypt-cavs-1.9.4-150400.6.14.1

* libgcrypt-cavs-debuginfo-1.9.4-150400.6.14.1

* libgcrypt-devel-1.9.4-150400.6.14.1

* libgcrypt20-debuginfo-1.9.4-150400.6.14.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE libgcrypt Denial of Service Vulnerability Advisory A moderate denial of service vulnerability has been identified in libgcrypt, tracked as CVE-2026-41989. This vulnerability allows crafted ECDH ciphertext to lead to a denial of service condition. Affected systems include SUSE Linux Enterprise Micro 5.3, 5.4, and openSUSE Leap 15.4. The issue was published on April 23, 2026, and has been addressed with patches available for various SUSE products. Administrators are advised to apply the patches using recommended installation methods such as YaST or zypper. The vulnerability has a CVSS score of 6.3, indicating a moderate severity level. No active exploitation has been reported at this time. The advisory emphasizes the importance of keeping systems up to date to mitigate potential risks. 2 sources 46

Extracted Entities

openSUSE libgcrypt Denial of Service Vulnerability CVE-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (3)