Astra Linux – Vulnerability in python-cryptography

Cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.5, the publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey, and loadpempublickey functions did not verify...

RLSA-2026:50144 Moderate: libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 For more details about the security issues, including the impact, a CVSS score...

libgcrypt security update

An update is available for libgcrypt. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libgcrypt library provides general-purpose implementations of various...

libgcrypt security update

An update is available for libgcrypt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libgcrypt library provides general-purpose implementations of various...

Oracle Linux 10 : ELSA-2026-50144-0: / libgcrypt (ELSA-2026-501440)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501440 advisory. - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext Tenable has extracted the preceding description block directly from t...

Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...

Security update for libgcrypt

This update for libgcrypt fixes the following issue CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service bsc1262684. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

ALSA-2026:50144 Moderate: libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 For more details about the security issues, including the impact, a CVSS score...

libgcrypt security update

1.11.0-7 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext 1.11.0-6 - Disable annocheck on riscv64 fixes build Resolves: RHEL-88837...

Moderate: libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 For more details about the security issues, including the impact, a CVSS score...

Remote Denial Of Service (Dos)

github.com/pion/dtls is vulnerable to Remote Denial of Service Dos. The vulnerability is due to improper parsing of a crafted ECDHEPSK ServerKeyExchange message, which allows a remote attacker to trigger a panic...

CVE-2026-64313

A flaw was found in the Linux kernel's Elliptic Curve Cryptography ECC component. An attacker on an adjacent network could exploit an error in the very long integer vli multiplication's carry flag calculation. This mathematical inaccuracy in cryptographic operations could lead to high impact on...

CVE-2026-62995 joserfc accepts JWT with padding, leading to JWT malleability

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...

PT-2026-65869

Name of the Vulnerable Software and Affected Versions joserfc versions prior to 1.7.2 Description The library accepts JSON Web Tokens JWTs containing trailing padding ==, which does not conform to JSON Object Signing and Encryption JOSE specifications. This results in token malleability, where a...

OSEC-2026-13 ECDSA accepts the point at infinity as a P256, P384, P521 public key

P256,P384,P521.Dsa.pubofoctets accepts 0x00, the encoding of the point at infinity, as a public key. The Diffie-Hellman path rejects that point pointofoctets; the ECDSA path skips the same check. Under such a key a signature can be forged with no private key, as the repro shows. The same class is...

crypto: ecc - Fix carry overflow in vli multiplication

...

SUSE CVE-2026-64313

In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.mhigh is saturated 0xFFFFFFFFFFFFFFFF and addition of lower bits overflows. The condition r01.mhigh product.mhigh doesn't handle the...

CVE-2026-64313

In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.mhigh is saturated 0xFFFFFFFFFFFFFFFF and addition of lower bits overflows. The condition r01.mhigh product.mhigh doesn't handle the...

CVE-2026-64313

In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.mhigh is saturated 0xFFFFFFFFFFFFFFFF and addition of lower bits overflows. The condition r01.mhigh product.mhigh doesn't handle the...

CVE-2026-64313 crypto: ecc - Fix carry overflow in vli multiplication

In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.mhigh is saturated 0xFFFFFFFFFFFFFFFF and addition of lower bits overflows. The condition r01.mhigh product.mhigh doesn't handle the...