It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libgcrypt-develUpgrade libgcrypt | May 4, 2022 | Sep 25, 2019 |
| Alpine Linux | — | Upgrade libgcrypt | Nov 27, 2019 | Sep 25, 2019 |
| Centos_linux | — | Upgrade libgcrypt-debugsourceUpgrade libgcrypt-debuginfoUpgrade libgcrypt-devel-debuginfoUpgrade libgcrypt-develUpgrade libgcrypt | Nov 5, 2020 | Sep 25, 2019 |
| Debian | — | Upgrade libgcrypt20 | Sep 26, 2019 | Sep 26, 2019 |
| Freebsd | — | Upgrade libgcrypt | Sep 3, 2019 | Sep 2, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/libgcrypt. | Mar 16, 2020 | Sep 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 19, 2019 | Sep 25, 2019 |
| Oracle Solaris | — | Upgrade system/library/security/libgcrypt to version 1.8.5-11.4.15.0.1.2.0 on Solaris 11.4 | Nov 20, 2019 | Sep 25, 2019 |
| Oracle_linux | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 12, 2020 | Oct 2, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Sep 25, 2019 |
| Redhat_linux | — | Upgrade libgcrypt-devel-debuginfoUpgrade libgcryptUpgrade libgcrypt-debuginfoUpgrade libgcrypt-debugsourceUpgrade libgcrypt-devel | Nov 5, 2020 | Sep 25, 2019 |
| Rocky_linux | — | Upgrade libgcrypt-debuginfoUpgrade libgcryptUpgrade libgcrypt-devel-debuginfoUpgrade libgcrypt-debugsourceUpgrade libgcrypt-devel | Mar 12, 2024 | Sep 25, 2019 |
| Suse | — | Upgrade libgcrypt20-hmacUpgrade libgcrypt20Upgrade libgcrypt-devel-32bitUpgrade libgcrypt20-hmac-32bitUpgrade libgcrypt-develUpgrade libgcrypt20-32bitUpgrade libgcrypt-cavs | Sep 25, 2019 | Aug 29, 2019 |
| Ubuntu | — | Upgrade libgcrypt20Upgrade libgcrypt11Upgrade libgcrypt11 (Ubuntu Pro) | Jan 14, 2020 | Aug 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub