{"cves":["CVE-2026-41989"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[1.10.0-13_fips]\n- Add FIPS package change: add fips suffix to Release and\n  set Epoch to 10 [Orabug: 35961378]\n- Update FIPS module name for Oracle Linux [Orabug: 35961378]\n\n[1.10.0-13]\n- Bump version to fix wrong build target.\n\n[1.10.0.12]\n- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext","id":"ELSA-2026-500145","ovalId":"oval:com.oracle.elsa:def:2026500145","source":"oracle_linux","title":"ELSA-2026-500145: libgcrypt security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-500145.html"}