SUSE-FU-2026:21232-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-fu-202621232-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-FU-2026:21232-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-FU-2026:21232-1
Upstream
Related
Published
2026-04-17T10:34:15Z
Modified
2026-04-23T18:26:47Z
Summary
Feature update for libgcrypt, libgpg-error
Details

This update for libgcrypt, libgpg-error fixes the following issues:

Update libgcrypt to 1.12.1 (jsc#PED-15059):

  • New and extended interfaces:
  • Allow access to the FIPS service indicator via the new GCRYCTL_FIPS_SERVICE_INDICATOR control code.
  • Make SHA-1 non-FIPS internally for the 1.12 API
  • Add Dilithium (ML-DSA) support
  • Support optional random-override and support byte string data
  • Bug fixes:
  • Use secure MPI in _gcry_mpi_assign_limb_space.
  • Use CSIDL_COMMON_APPDATA instead of /etc on Windows.
  • Apply a Kyber patch from upstream.
  • Fix an edge case in Jent initialization.
  • mceliece6688128f: Fix stack overflow crash on win64/wine
  • Performance:
  • Many performance improvements, new AVX512 implementations for modern CPUs.
  • Add RISC-V Zbb+Zbc implementation of CRC.
  • Add RISC-V vector cryptography implementation of GHASH, AES, SHA256 and SHA512
  • Add AVX2 and AVX512 code paths to improve CRC.

For a full changelog, see: https://dev.gnupg.org/source/libgcrypt/history/master/;libgcrypt-1.12.0

Update libgpg-error to 1.58:

  • New src/gpg-error.c (main): New command "fconcat".
  • Rename src/spawn-posix.c (struct gpgrt_spawn_actions): Rename the field to ENVP.
  • argparse: Use SYSCONFDIR for /etc.
  • Update translations for Portugese, German
  • src/estream.c (parse_mode): Fix parsing of "share". Set sysopen flag.
  • syscfg: Add 64-bit Android arch.
References

Affected packages

SUSE:Linux Micro 6.2 / libgcrypt

Package

Name
libgcrypt
Purl
pkg:rpm/suse/libgcrypt&distro=SUSE%20Linux%20Micro%206.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.12.1-160000.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libgcrypt20":  "1.12.1-160000.1.1",
            "libgpg-error0":  "1.58-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-FU-2026:21232-1.json"

SUSE:Linux Micro 6.2 / libgpg-error

Package

Name
libgpg-error
Purl
pkg:rpm/suse/libgpg-error&distro=SUSE%20Linux%20Micro%206.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.58-160000.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libgcrypt20":  "1.12.1-160000.1.1",
            "libgpg-error0":  "1.58-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-FU-2026:21232-1.json"