CVE catalog

CVE-2019-13627

libgcrypt20 affected and fixed versions

[CVE catalog]

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.

Severity
Medium · CVSS 6.3CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.55% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securitylibgcrypt201.11.0-7+deb13u1Fixed[CVE-2019-13627]
Debiantrixielibgcrypt201.11.0-7+deb13u1Fixed[CVE-2019-13627]
Debiantrixielibgcrypt201.8.5-1FixedDistribution-reported fixed boundary[CVE-2019-13627]
Debiansidlibgcrypt201.12.4-2Fixed[CVE-2019-13627]
Debiansidlibgcrypt201.8.5-1FixedDistribution-reported fixed boundary[CVE-2019-13627]
Debianforkylibgcrypt201.12.4-2Fixed[CVE-2019-13627]
Debianforkylibgcrypt201.8.5-1FixedDistribution-reported fixed boundary[CVE-2019-13627]
Debianbookworm-securitylibgcrypt201.10.1-3+deb12u1Fixed[CVE-2019-13627]
Debianbookwormlibgcrypt201.10.1-3+deb12u1Fixed[CVE-2019-13627]
Debianbookwormlibgcrypt201.8.5-1FixedDistribution-reported fixed boundary[CVE-2019-13627]

Showing 10 fix observations. All 78 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedlibgcrypt201.8.5-1UnknownSource applicability is not establishedProvider not reported
Alpine3.10libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.11libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.12libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.13libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.14libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.15libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.16libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.17libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.18libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.19libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.20libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.21libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.22libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.23libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.24libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Alpine3.9libgcrypt1.8.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-13627]
Debianbookwormlibgcrypt201.10.1-3+deb12u1Fixed[CVE-2019-13627]
Debianbookwormlibgcrypt201.8.5-1FixedDistribution-reported fixed boundary[CVE-2019-13627]
Debianbookworm-securitylibgcrypt201.10.1-3+deb12u1Fixed[CVE-2019-13627]
Debianforkylibgcrypt201.12.4-2Fixed[CVE-2019-13627]
Debianforkylibgcrypt201.8.5-1FixedDistribution-reported fixed boundary[CVE-2019-13627]
Debiansidlibgcrypt201.12.4-2Fixed[CVE-2019-13627]
Debiansidlibgcrypt201.8.5-1FixedDistribution-reported fixed boundary[CVE-2019-13627]
Debiantrixielibgcrypt201.11.0-7+deb13u1Fixed[CVE-2019-13627]
Debiantrixielibgcrypt201.8.5-1FixedDistribution-reported fixed boundary[CVE-2019-13627]
Debiantrixie-securitylibgcrypt201.11.0-7+deb13u1Fixed[CVE-2019-13627]
Opensuseleap 15.0libgcrypt1.8.2-lp150.5.13.1UnknownSource applicability is not established[OPENSUSE-SU-2019:2161-1]
Opensuseleap 15.1libgcrypt1.8.2-lp151.9.7.1UnknownSource applicability is not established[OPENSUSE-SU-2020:0022-1]
Suseenterprise storage 4libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suseenterprise storage 5libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Susehpe helion openstack 8libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise desktop 12 sp4libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise module for basesystem 15libgcrypt1.8.2-6.20.1UnknownSource applicability is not established[SUSE-SU-2019:2349-1]
Suselinux enterprise module for basesystem 15 sp1libgcrypt1.8.2-8.12.1UnknownSource applicability is not established[SUSE-SU-2019:3392-1]
Suselinux enterprise server 12 sp1-ltsslibgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server 12 sp2-bcllibgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server 12 sp2-ltsslibgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server 12 sp3-bcllibgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server 12 sp3-ltsslibgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server 12 sp4libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server 12 sp5libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server for sap applications 12 sp1libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server for sap applications 12 sp2libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server for sap applications 12 sp3libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server for sap applications 12 sp4libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise server for sap applications 12 sp5libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise software development kit 12 sp4libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suselinux enterprise software development kit 12 sp5libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suseopenstack cloud 7libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suseopenstack cloud 8libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Suseopenstack cloud crowbar 8libgcrypt1.6.1-16.68.1UnknownSource applicability is not established[SUSE-SU-2019:2510-1]
Ubuntu16.04libgcrypt201.6.3-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu16.04libgcrypt201.6.4-3UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu16.04libgcrypt201.6.4-4UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu16.04libgcrypt201.6.4-5UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu16.04libgcrypt201.6.5-2UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu16.04libgcrypt201.6.5-2ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu16.04libgcrypt201.6.5-2ubuntu0.3UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu16.04libgcrypt201.6.5-2ubuntu0.4UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu16.04libgcrypt201.6.5-2ubuntu0.5UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu16.04libgcrypt201.6.5-2ubuntu0.6UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-2]
Ubuntu18.04libgcrypt201.7.8-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-1]
Ubuntu18.04libgcrypt201.7.9-1UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-1]
Ubuntu18.04libgcrypt201.8.1-4UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-1]
Ubuntu18.04libgcrypt201.8.1-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-1]
Ubuntu18.04libgcrypt201.8.1-4ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-1]
Ubuntu18.04libgcrypt201.8.1-4ubuntu1.2UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-1]
Ubuntuprolibgcrypt111.5.0-3ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Ubuntuprolibgcrypt111.5.3-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Ubuntuprolibgcrypt111.5.3-2ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Ubuntuprolibgcrypt111.5.3-2ubuntu4.1UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Ubuntuprolibgcrypt111.5.3-2ubuntu4.2UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Ubuntuprolibgcrypt111.5.3-2ubuntu4.3UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Ubuntuprolibgcrypt111.5.3-2ubuntu4.4UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Ubuntuprolibgcrypt111.5.3-2ubuntu4.5UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Ubuntuprolibgcrypt111.5.3-2ubuntu4.6UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Ubuntuprolibgcrypt111.5.3-2ubuntu4.6+esm1UnknownSource applicability is not established[UBUNTU-CVE-2019-13627][USN-4236-3]
Original provider fields
{
  "package_releases": [
    {
      "name": "libgcrypt20",
      "status": "fixed",
      "release": "sid",
      "version": "1.12.4-2"
    },
    {
      "name": "libgcrypt20",
      "status": "fixed",
      "release": "forky",
      "version": "1.12.4-2"
    },
    {
      "name": "libgcrypt20",
      "status": "fixed",
      "release": "trixie",
      "version": "1.11.0-7+deb13u1"
    },
    {
      "name": "libgcrypt20",
      "status": "fixed",
      "release": "trixie-security",
      "version": "1.11.0-7+deb13u1"
    },
    {
      "name": "libgcrypt20",
      "status": "fixed",
      "release": "bookworm",
      "version": "1.10.1-3+deb12u1"
    },
    {
      "name": "libgcrypt20",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "1.10.1-3+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 938938,
      "name": "libgcrypt20",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1.8.5-1"
    },
    {
      "bug": 938938,
      "name": "libgcrypt20",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1.8.5-1"
    },
    {
      "bug": 938938,
      "name": "libgcrypt20",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "1.8.5-1"
    },
    {
      "bug": 938938,
      "name": "libgcrypt20",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "1.8.5-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "libgcrypt20",
      "fixed_version": "1.8.5-1",
      "applicability_unknown": true
    },
    {
      "name": "ubuntu_linux",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13627",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2019-13627",
      "provider_updated_at": "2026-10-14T07:16:46.647"
    },
    {
      "name": "leap",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13627",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2019-13627",
      "provider_updated_at": "2026-10-14T07:16:46.647"
    },
    {
      "name": "libgcrypt20",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13627",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2019-13627",
      "provider_updated_at": "2026-10-14T07:16:46.647"
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.10",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.11",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.12",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.13",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.14",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.15",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.16",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.5-r0"
            }
          ]
        }
      ],
      "release": "3.9",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-13627",
      "fixed_version": "1.8.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-13627",
      "provider_updated_at": "2026-09-21T06:17:52.482285044Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt11",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.5.3-2ubuntu4.6+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1.5.0-3ubuntu3",
        "1.5.3-2ubuntu1",
        "1.5.3-2ubuntu4",
        "1.5.3-2ubuntu4.1",
        "1.5.3-2ubuntu4.2",
        "1.5.3-2ubuntu4.3",
        "1.5.3-2ubuntu4.4",
        "1.5.3-2ubuntu4.5",
        "1.5.3-2ubuntu4.6"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2019-13627",
      "fixed_version": "1.5.3-2ubuntu4.6+esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2019-13627",
      "provider_updated_at": "2026-04-22T12:10:17.061794Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt20",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.5-2ubuntu0.6"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "1.6.3-2ubuntu1",
        "1.6.4-3",
        "1.6.4-4",
        "1.6.4-5",
        "1.6.5-2",
        "1.6.5-2ubuntu0.2",
        "1.6.5-2ubuntu0.3",
        "1.6.5-2ubuntu0.4",
        "1.6.5-2ubuntu0.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2019-13627",
      "fixed_version": "1.6.5-2ubuntu0.6",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2019-13627",
      "provider_updated_at": "2026-04-22T12:10:17.061794Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt20",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.1-4ubuntu1.2"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "1.7.8-2ubuntu1",
        "1.7.9-1",
        "1.8.1-4",
        "1.8.1-4ubuntu1",
        "1.8.1-4ubuntu1.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2019-13627",
      "fixed_version": "1.8.1-4ubuntu1.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2019-13627",
      "provider_updated_at": "2026-04-22T12:10:17.061794Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt11",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.5.3-2ubuntu4.6+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1.5.0-3ubuntu3",
        "1.5.3-2ubuntu1",
        "1.5.3-2ubuntu4",
        "1.5.3-2ubuntu4.1",
        "1.5.3-2ubuntu4.2",
        "1.5.3-2ubuntu4.3",
        "1.5.3-2ubuntu4.4",
        "1.5.3-2ubuntu4.5",
        "1.5.3-2ubuntu4.6"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4236-3",
      "fixed_version": "1.5.3-2ubuntu4.6+esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-4236-3",
      "provider_updated_at": "2026-04-22T10:02:01.648424Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt20",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.5-2ubuntu0.6"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "1.6.3-2ubuntu1",
        "1.6.4-3",
        "1.6.4-4",
        "1.6.4-5",
        "1.6.5-2",
        "1.6.5-2ubuntu0.2",
        "1.6.5-2ubuntu0.3",
        "1.6.5-2ubuntu0.4",
        "1.6.5-2ubuntu0.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4236-2",
      "fixed_version": "1.6.5-2ubuntu0.6",
      "provider_source": "pypi",
      "provider_record_id": "USN-4236-2",
      "provider_updated_at": "2026-04-22T10:01:56.227928Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt20",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.1-4ubuntu1.2"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "1.7.8-2ubuntu1",
        "1.7.9-1",
        "1.8.1-4",
        "1.8.1-4ubuntu1",
        "1.8.1-4ubuntu1.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4236-1",
      "fixed_version": "1.8.1-4ubuntu1.2",
      "provider_source": "pypi",
      "provider_record_id": "USN-4236-1",
      "provider_updated_at": "2026-04-22T09:51:04.193002Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "hpe helion openstack 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise desktop 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.1-16.68.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2510-1",
      "fixed_version": "1.6.1-16.68.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2510-1",
      "provider_updated_at": "2026-02-04T04:19:17.617504Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.2-lp150.5.13.1"
            }
          ]
        }
      ],
      "release": "leap 15.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2019:2161-1",
      "fixed_version": "1.8.2-lp150.5.13.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2019:2161-1",
      "provider_updated_at": "2026-02-04T04:12:28.115801Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.2-6.20.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:2349-1",
      "fixed_version": "1.8.2-6.20.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:2349-1",
      "provider_updated_at": "2026-02-04T03:50:15.617671Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.2-8.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:3392-1",
      "fixed_version": "1.8.2-8.12.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:3392-1",
      "provider_updated_at": "2026-02-04T02:49:45.501207Z",
      "applicability_unknown": true
    },
    {
      "name": "libgcrypt",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.2-lp151.9.7.1"
            }
          ]
        }
      ],
      "release": "leap 15.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2020:0022-1",
      "fixed_version": "1.8.2-lp151.9.7.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2020:0022-1",
      "provider_updated_at": "2026-02-04T02:46:02.303693Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #938938]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libgcrypt20]Unknown
    Details (4)

    • 1.10.1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

  • [libgcrypt20-dev]Unknown

    Source package: [libgcrypt20]

    Details (4)

    • 1.10.1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

  • [libgcrypt20-doc]Unknown

    Source package: [libgcrypt20]

    Details (4)

    • 1.10.1-3+deb12u1 · all · bookworm

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · all · bookworm

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · all · bookworm-security

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · all · bookworm-security

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

  • [libgcrypt-mingw-w64-dev]Unknown

    Source package: [libgcrypt20]

    Details (4)

    • 1.10.1-3+deb12u1 · all · bookworm

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · all · bookworm

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · all · bookworm-security

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

    • 1.10.1-3+deb12u1 · all · bookworm-security

      Fixed · Fixed: 1.8.5-1

      dsa · libgcrypt20 · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]