Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libresslUpgrade libgcrypt | Jun 22, 2018 | Jun 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-develUpgrade nss-pkcs11-develUpgrade nss-toolsUpgrade openssl-libsUpgrade nss-debuginfoUpgrade openssl-perlUpgrade nss-sysinitUpgrade nssUpgrade opensslUpgrade openssl-debuginfoUpgrade openssl-staticUpgrade nss-devel | Apr 27, 2020 | Jun 13, 2018 |
| Amazon_linux | — | Upgrade opensslUpgrade nss-softoknUpgrade nssUpgrade nsprUpgrade nss-util | Dec 7, 2018 | Jun 13, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 13, 2018 |
| Centos_linux | — | Upgrade nss-softokn-debuginfoUpgrade nspr-debuginfoUpgrade nss-pkcs11-develUpgrade nss-softokn-freeblUpgrade opensslUpgrade nss-softoknUpgrade nss-utilUpgrade nsprUpgrade nss-softokn-develUpgrade nspr-develUpgrade openssl-debuginfoUpgrade openssl-perlUpgrade nss-softokn-freebl-develUpgrade nss-util-develUpgrade nssUpgrade nss-util-debuginfoUpgrade openssl-develUpgrade nss-develUpgrade nss-debuginfoUpgrade openssl-staticUpgrade openssl-libsUpgrade nss-sysinitUpgrade nss-tools | Jun 10, 2019 | Jun 13, 2018 |
| Debian | — | Upgrade libgcrypt20 | Jun 19, 2018 | Jun 13, 2018 |
| Freebsd | — | Upgrade libgcrypt | Jun 14, 2018 | Jun 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-softokn-freebl-devel | Dec 31, 2018 | Jun 13, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nss-softokn-freebl-devel | Dec 11, 2018 | Jun 13, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-softokn-freebl | Jan 9, 2019 | Jun 13, 2018 |
| Oracle Solaris | — | Upgrade library/security/libgpg-error to version 1.31-11.4.9.0.1.1.0 on Solaris 11.4Upgrade SUNWaclg to version 1.0.4-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/pth to version 2.0.7-11.4.9.0.1.1.0 on Solaris 11.4Upgrade system/library/security/libgcrypt to version 1.7.9-0.175.3.35.0.5.0 on Solaris 11.3Upgrade consolidation/sic_team/sic_team-incorporation to version 0.11.5-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/security/libassuan to version 2.5.1-11.4.9.0.1.1.0 on Solaris 11.4Upgrade library/java/apache-commons-logging to version 1.0.4-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/java/commons-logging to version 1.0.4-11.4.7.0.1.2.0 on Solaris 11.4Upgrade SUNWtlsu to version 4.36.1-11.4.7.0.1.2.0 on Solaris 11.4Upgrade security/nss-utilities to version 4.36.1-11.4.7.0.1.2.0 on Solaris 11.4Upgrade system/library/security/libgcrypt to version 1.8.3-11.4.9.0.1.1.0 on Solaris 11.4Upgrade library/npth to version 1.5-11.4.9.0.1.1.0 on Solaris 11.4Upgrade SUNWjss to version 4.3.2-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/security/gpgme to version 1.11.1-11.4.9.0.1.1.0 on Solaris 11.4Upgrade SUNWprd to version 0.5.11-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/nspr/header-nspr to version 0.5.11-11.4.7.0.1.2.0 on Solaris 11.4Upgrade crypto/gnupg to version 2.2.8-11.4.9.0.1.1.0 on Solaris 11.4Upgrade system/library/mozilla-nss to version 0.5.11-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/security/libksba to version 1.3.5-11.4.9.0.1.1.0 on Solaris 11.4Upgrade security/pinentry to version 1.1.0-11.4.9.0.1.1.0 on Solaris 11.4Upgrade SUNWtlsd to version 0.5.11-11.4.7.0.1.2.0 on Solaris 11.4Upgrade system/library/mozilla-nss/header-nss to version 0.5.11-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/java/jss to version 4.3.2-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/gmime to version 2.6.23-11.4.9.0.1.1.0 on Solaris 11.4Upgrade system/mozilla-nss to version 4.36.1-11.4.7.0.1.2.0 on Solaris 11.4Upgrade SUNWtls to version 0.5.11-11.4.7.0.1.2.0 on Solaris 11.4Upgrade SUNWpr to version 0.5.11-11.4.7.0.1.2.0 on Solaris 11.4Upgrade security/pinentry-gtk to version 1.1.0-11.4.9.0.1.1.0 on Solaris 11.4Upgrade library/security/nss to version 4.38-11.4.7.0.1.2.0 on Solaris 11.4 | Aug 24, 2018 | Jun 13, 2018 |
| Oracle_linux | — | Upgrade nss-softokn-freeblUpgrade nss-develUpgrade nspr-develUpgrade nsprUpgrade nss-pkcs11-develUpgrade nssUpgrade nss-toolsUpgrade nss-softokn-develUpgrade nss-utilUpgrade opensslUpgrade openssl-perlUpgrade nss-util-develUpgrade openssl-libsUpgrade openssl-develUpgrade openssl-staticUpgrade nss-softoknUpgrade nss-softokn-freebl-develUpgrade nss-sysinit | Nov 6, 2018 | Jun 13, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Jun 13, 2018 |
| Redhat_linux | — | Upgrade nss-toolsUpgrade openssl-debuginfoUpgrade openssl-staticUpgrade nss-debuginfoUpgrade nss-develUpgrade nss-util-debuginfoUpgrade nss-utilNo solution existsUpgrade openssl-libsUpgrade openssl-develUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freeblUpgrade nspr-debuginfoUpgrade nss-softokn-develUpgrade openssl-perlUpgrade nss-pkcs11-develUpgrade opensslUpgrade nss-softoknUpgrade nspr-develUpgrade nss | Oct 31, 2018 | Jun 13, 2018 |
| Suse | — | Upgrade libfreebl3Upgrade libsoftokn3-32bitUpgrade mozilla-nsprUpgrade libsoftokn3Upgrade mozilla-nssUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade libgcrypt-devel-32bitUpgrade MozillaFirefox-develUpgrade mozilla-nspr-develUpgrade mozilla-nss-sysinit-32bitUpgrade libgcrypt20-hmac-32bitUpgrade MozillaFirefox-translations-otherUpgrade libgcrypt-cavsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-sysinitUpgrade mozilla-nss-toolsUpgrade mozilla-nss-certsUpgrade libsoftokn3-hmacUpgrade libgcrypt20-hmacUpgrade libgcrypt20Upgrade mozilla-nss-certs-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-32bitUpgrade libsoftokn3-hmac-32bitUpgrade libgcrypt-develUpgrade libfreebl3-hmac-32bitUpgrade libfreebl3-hmacUpgrade MozillaFirefoxUpgrade libgcrypt20-32bit | Jul 28, 2018 | Jun 13, 2018 |
| Ubuntu | — | Upgrade libssl1.1Upgrade libssl1.0.0Upgrade libgcrypt20Upgrade libnss3Upgrade libgcrypt11 | Jun 27, 2018 | Jun 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub