{"id":"CVE-2015-0289","aliases":["BELL-CVE-2015-0289","DEBIAN-CVE-2015-0289","DLA-177-1","DSA-3197-1","EUVD-2015-0302","GHSA-cxc6-qvvg-mcqm","MGASA-2015-0111","RHSA-2015:0715","RHSA-2015:0716","RHSA-2015:0752","RHSA-2015:0800","SUSE-FU-2022:0445-1","SUSE-RU-2015:0769-1","SUSE-SU-2015:0182-2","SUSE-SU-2015:0541-1","SUSE-SU-2015:0543-1","SUSE-SU-2015:0545-1","SUSE-SU-2015:0545-2","SUSE-SU-2015:0546-1","SUSE-SU-2015:0547-1","SUSE-SU-2015:0553-1","SUSE-SU-2015:0553-2","SUSE-SU-2015:0578-1","SUSE-SU-2015:1182-1","SUSE-SU-2015:1182-2","SUSE-SU-2015:1183-1","SUSE-SU-2015:1183-2","SUSE-SU-2015:1184-1","SUSE-SU-2015:1184-2","SUSE-SU-2015:1185-1","SUSE-SU-403","UBUNTU-CVE-2015-0289","USN-2537-1","openSUSE-SU-2024:10271-1","openSUSE-SU-2024:10309-1","openSUSE-SU-2024:10529-1","openSUSE-SU-2024:11127-1"],"status":"published","title":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,...","description":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.08599,"percentile":0.95117,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2012-08-30T22:56:05Z","modified":"2026-09-21T10:01:15Z","fixes":[{"ecosystem":"Debian:12","package":"openssl","fixed_in":["1.0.1k-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["1.0.1k-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["1.0.1k-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.11"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1k-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1k-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1k-2"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8o-4squeeze20"}]}],"versions":["0.9.8o-4","0.9.8o-4squeeze1","0.9.8o-4squeeze11","0.9.8o-4squeeze12","0.9.8o-4squeeze13","0.9.8o-4squeeze14","0.9.8o-4squeeze15","0.9.8o-4squeeze16","0.9.8o-4squeeze17","0.9.8o-4squeeze18","0.9.8o-4squeeze19","0.9.8o-4squeeze2","0.9.8o-4squeeze3","0.9.8o-4squeeze4","0.9.8o-4squeeze4~bpo50+1","0.9.8o-4squeeze5","0.9.8o-4squeeze7","0.9.8o-4squeeze8","0.9.8o-4squeeze9"],"bundled":7},{"source":"osv","ecosystem":"Debian:7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-2+deb7u15"}]}],"versions":["1.0.1e-2","1.0.1e-2+deb7u1","1.0.1e-2+deb7u10","1.0.1e-2+deb7u11","1.0.1e-2+deb7u12","1.0.1e-2+deb7u13","1.0.1e-2+deb7u14","1.0.1e-2+deb7u2","1.0.1e-2+deb7u3","1.0.1e-2+deb7u4","1.0.1e-2+deb7u5","1.0.1e-2+deb7u6","1.0.1e-2+deb7u7","1.0.1e-2+deb7u8","1.0.1e-2+deb7u9"],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1m-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-73.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-73.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.11"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.11"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-1.2"}]}],"bundled":136}],"products":[{"vendor":"openssl","product":"openssl"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10110","tags":["x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10680","tags":["x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3197","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2537-1","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","tags":["x_transferred","advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","tags":["x_transferred","Vendor Advisory","advisory","article"]},{"url":"http://www.securityfocus.com/bid/73231","tags":["vdb-entry","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","tags":["x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","tags":["x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c0334c2c92dd1bc3ad8138ba6e74006c3631b0f9","tags":["x_transferred","web"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://access.redhat.com/articles/1384453","tags":["x_transferred","web","article"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143213830203296\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","tags":["x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","tags":["x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142841429220765\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://support.apple.com/kb/HT204942","tags":["x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202384","tags":["x_transferred","report"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144050297101809\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","tags":["x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1031929","tags":["vdb-entry","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201503-11","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0289","tags":["advisory"]},{"url":"https://git.openssl.org/?p=openssl.git;a=commit;h=c0334c2c92dd1bc3ad8138ba6e74006c3631b0f9"},{"url":"https://github.com/advisories/GHSA-cxc6-qvvg-mcqm"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-0289","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-0289","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0111.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15530","tags":["report"]},{"url":"http://openssl.org/news/secadv_20150319.txt","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0715","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202418","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0715.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0209","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0209","tags":["advisory"]},{"url":"https://openssl.org/news/secadv_20150319.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0286","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0286","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0286","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0287","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0287","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0288","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0288","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0289","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0292","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0292","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0292","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0293","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0293","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0293","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310811","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0703","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0703","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310814","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0704","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0716","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0716.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0752","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0752.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0800","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv_20150108.txt","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180187","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0800.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8275","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8275","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0204","tags":["advisory"]},{"url":"https://securityblog.redhat.com/2015/03/04/factoring-rsa-export-keys-freak-cve-2015-0204/","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/-2022-445/suse-fu-20220445-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000080","tags":["report"]},{"url":"https://bugzilla.suse.com/1000117","tags":["report"]},{"url":"https://bugzilla.suse.com/1000194","tags":["report"]},{"url":"https://bugzilla.suse.com/1000677","tags":["report"]},{"url":"https://bugzilla.suse.com/1000742","tags":["report"]},{"url":"https://bugzilla.suse.com/1001148","tags":["report"]},{"url":"https://bugzilla.suse.com/1001912","tags":["report"]},{"url":"https://bugzilla.suse.com/1002585","tags":["report"]},{"url":"https://bugzilla.suse.com/1002895","tags":["report"]},{"url":"https://bugzilla.suse.com/1003091","tags":["report"]},{"url":"https://bugzilla.suse.com/1005246","tags":["report"]},{"url":"https://bugzilla.suse.com/1009528","tags":["report"]},{"url":"https://bugzilla.suse.com/1010874","tags":["report"]},{"url":"https://bugzilla.suse.com/1010966","tags":["report"]},{"url":"https://bugzilla.suse.com/1011936","tags":["report"]},{"url":"https://bugzilla.suse.com/1015549","tags":["report"]},{"url":"https://bugzilla.suse.com/1019637","tags":["report"]},{"url":"https://bugzilla.suse.com/1021641","tags":["report"]},{"url":"https://bugzilla.suse.com/1022085","tags":["report"]},{"url":"https://bugzilla.suse.com/1022086","tags":["report"]},{"url":"https://bugzilla.suse.com/1022271","tags":["report"]},{"url":"https://bugzilla.suse.com/1027079","tags":["report"]},{"url":"https://bugzilla.suse.com/1027610","tags":["report"]},{"url":"https://bugzilla.suse.com/1027688","tags":["report"]},{"url":"https://bugzilla.suse.com/1027705","tags":["report"]},{"url":"https://bugzilla.suse.com/1027908","tags":["report"]},{"url":"https://bugzilla.suse.com/1028281","tags":["report"]},{"url":"https://bugzilla.suse.com/1028723","tags":["report"]},{"url":"https://bugzilla.suse.com/1029523","tags":["report"]},{"url":"https://bugzilla.suse.com/1029902","tags":["report"]},{"url":"https://bugzilla.suse.com/1030038","tags":["report"]},{"url":"https://bugzilla.suse.com/1032118","tags":["report"]},{"url":"https://bugzilla.suse.com/1032119","tags":["report"]},{"url":"https://bugzilla.suse.com/1035604","tags":["report"]},{"url":"https://bugzilla.suse.com/1039469","tags":["report"]},{"url":"https://bugzilla.suse.com/1040164","tags":["report"]},{"url":"https://bugzilla.suse.com/1040256","tags":["report"]},{"url":"https://bugzilla.suse.com/1041090","tags":["report"]},{"url":"https://bugzilla.suse.com/1042392","tags":["report"]},{"url":"https://bugzilla.suse.com/1042670","tags":["report"]},{"url":"https://bugzilla.suse.com/1044095","tags":["report"]},{"url":"https://bugzilla.suse.com/1044107","tags":["report"]},{"url":"https://bugzilla.suse.com/1044175","tags":["report"]},{"url":"https://bugzilla.suse.com/1049186","tags":["report"]},{"url":"https://bugzilla.suse.com/1049304","tags":["report"]},{"url":"https://bugzilla.suse.com/1050653","tags":["report"]},{"url":"https://bugzilla.suse.com/1050665","tags":["report"]},{"url":"https://bugzilla.suse.com/1055478","tags":["report"]},{"url":"https://bugzilla.suse.com/1055542","tags":["report"]},{"url":"https://bugzilla.suse.com/1055825","tags":["report"]},{"url":"https://bugzilla.suse.com/1056058","tags":["report"]},{"url":"https://bugzilla.suse.com/1056951","tags":["report"]},{"url":"https://bugzilla.suse.com/1057496","tags":["report"]},{"url":"https://bugzilla.suse.com/1062237","tags":["report"]},{"url":"https://bugzilla.suse.com/1065363","tags":["report"]},{"url":"https://bugzilla.suse.com/1066242","tags":["report"]},{"url":"https://bugzilla.suse.com/1066873","tags":["report"]},{"url":"https://bugzilla.suse.com/1068790","tags":["report"]},{"url":"https://bugzilla.suse.com/1070737","tags":["report"]},{"url":"https://bugzilla.suse.com/1070738","tags":["report"]},{"url":"https://bugzilla.suse.com/1070853","tags":["report"]},{"url":"https://bugzilla.suse.com/1071905","tags":["report"]},{"url":"https://bugzilla.suse.com/1071906","tags":["report"]},{"url":"https://bugzilla.suse.com/1071941","tags":["report"]},{"url":"https://bugzilla.suse.com/1073310","tags":["report"]},{"url":"https://bugzilla.suse.com/1073845","tags":["report"]},{"url":"https://bugzilla.suse.com/1073879","tags":["report"]},{"url":"https://bugzilla.suse.com/1074247","tags":["report"]},{"url":"https://bugzilla.suse.com/1076519","tags":["report"]},{"url":"https://bugzilla.suse.com/1077096","tags":["report"]},{"url":"https://bugzilla.suse.com/1077230","tags":["report"]},{"url":"https://bugzilla.suse.com/1078329","tags":["report"]},{"url":"https://bugzilla.suse.com/1079761","tags":["report"]},{"url":"https://bugzilla.suse.com/1080301","tags":["report"]},{"url":"https://bugzilla.suse.com/1081005","tags":["report"]},{"url":"https://bugzilla.suse.com/1081750","tags":["report"]},{"url":"https://bugzilla.suse.com/1081751","tags":["report"]},{"url":"https://bugzilla.suse.com/1082155","tags":["report"]},{"url":"https://bugzilla.suse.com/1082163","tags":["report"]},{"url":"https://bugzilla.suse.com/1082318","tags":["report"]},{"url":"https://bugzilla.suse.com/1083826","tags":["report"]},{"url":"https://bugzilla.suse.com/1084117","tags":["report"]},{"url":"https://bugzilla.suse.com/1084157","tags":["report"]},{"url":"https://bugzilla.suse.com/1085276","tags":["report"]},{"url":"https://bugzilla.suse.com/1085529","tags":["report"]},{"url":"https://bugzilla.suse.com/1085661","tags":["report"]},{"url":"https://bugzilla.suse.com/1087102","tags":["report"]},{"url":"https://bugzilla.suse.com/1087104","tags":["report"]},{"url":"https://bugzilla.suse.com/1088573","tags":["report"]},{"url":"https://bugzilla.suse.com/1089039","tags":["report"]},{"url":"https://bugzilla.suse.com/1090427","tags":["report"]},{"url":"https://bugzilla.suse.com/1090765","tags":["report"]},{"url":"https://bugzilla.suse.com/1090953","tags":["report"]},{"url":"https://bugzilla.suse.com/1093518","tags":["report"]},{"url":"https://bugzilla.suse.com/1093917","tags":["report"]},{"url":"https://bugzilla.suse.com/1094788","tags":["report"]},{"url":"https://bugzilla.suse.com/1094814","tags":["report"]},{"url":"https://bugzilla.suse.com/1094883","tags":["report"]},{"url":"https://bugzilla.suse.com/1095267","tags":["report"]},{"url":"https://bugzilla.suse.com/1096738","tags":["report"]},{"url":"https://bugzilla.suse.com/1096937","tags":["report"]},{"url":"https://bugzilla.suse.com/1097158","tags":["report"]},{"url":"https://bugzilla.suse.com/1097531","tags":["report"]},{"url":"https://bugzilla.suse.com/1097624","tags":["report"]},{"url":"https://bugzilla.suse.com/1098535","tags":["report"]},{"url":"https://bugzilla.suse.com/1098592","tags":["report"]},{"url":"https://bugzilla.suse.com/1099308","tags":["report"]},{"url":"https://bugzilla.suse.com/1099569","tags":["report"]},{"url":"https://bugzilla.suse.com/1100078","tags":["report"]},{"url":"https://bugzilla.suse.com/1101246","tags":["report"]},{"url":"https://bugzilla.suse.com/1101470","tags":["report"]},{"url":"https://bugzilla.suse.com/1102868","tags":["report"]},{"url":"https://bugzilla.suse.com/1104789","tags":["report"]},{"url":"https://bugzilla.suse.com/1106197","tags":["report"]},{"url":"https://bugzilla.suse.com/1108508","tags":["report"]},{"url":"https://bugzilla.suse.com/1109882","tags":["report"]},{"url":"https://bugzilla.suse.com/1109998","tags":["report"]},{"url":"https://bugzilla.suse.com/1110435","tags":["report"]},{"url":"https://bugzilla.suse.com/1110869","tags":["report"]},{"url":"https://bugzilla.suse.com/1110871","tags":["report"]},{"url":"https://bugzilla.suse.com/1111493","tags":["report"]},{"url":"https://bugzilla.suse.com/1111622","tags":["report"]},{"url":"https://bugzilla.suse.com/1111657","tags":["report"]},{"url":"https://bugzilla.suse.com/1112209","tags":["report"]},{"url":"https://bugzilla.suse.com/1112357","tags":["report"]},{"url":"https://bugzilla.suse.com/1113534","tags":["report"]},{"url":"https://bugzilla.suse.com/1113652","tags":["report"]},{"url":"https://bugzilla.suse.com/1113742","tags":["report"]},{"url":"https://bugzilla.suse.com/1113975","tags":["report"]},{"url":"https://bugzilla.suse.com/1115769","tags":["report"]},{"url":"https://bugzilla.suse.com/1117951","tags":["report"]},{"url":"https://bugzilla.suse.com/1118611","tags":["report"]},{"url":"https://bugzilla.suse.com/1119376","tags":["report"]},{"url":"https://bugzilla.suse.com/1119416","tags":["report"]},{"url":"https://bugzilla.suse.com/1119792","tags":["report"]},{"url":"https://bugzilla.suse.com/1121717","tags":["report"]},{"url":"https://bugzilla.suse.com/1121852","tags":["report"]},{"url":"https://bugzilla.suse.com/1122191","tags":["report"]},{"url":"https://bugzilla.suse.com/1123064","tags":["report"]},{"url":"https://bugzilla.suse.com/1123185","tags":["report"]},{"url":"https://bugzilla.suse.com/1123186","tags":["report"]},{"url":"https://bugzilla.suse.com/1123558","tags":["report"]},{"url":"https://bugzilla.suse.com/1124885","tags":["report"]},{"url":"https://bugzilla.suse.com/1125815","tags":["report"]},{"url":"https://bugzilla.suse.com/1126283","tags":["report"]},{"url":"https://bugzilla.suse.com/1126318","tags":["report"]},{"url":"https://bugzilla.suse.com/1127080","tags":["report"]},{"url":"https://bugzilla.suse.com/1127173","tags":["report"]},{"url":"https://bugzilla.suse.com/1128146","tags":["report"]},{"url":"https://bugzilla.suse.com/1128323","tags":["report"]},{"url":"https://bugzilla.suse.com/1128355","tags":["report"]},{"url":"https://bugzilla.suse.com/1129071","tags":["report"]},{"url":"https://bugzilla.suse.com/1129566","tags":["report"]},{"url":"https://bugzilla.suse.com/1130840","tags":["report"]},{"url":"https://bugzilla.suse.com/1131291","tags":["report"]},{"url":"https://bugzilla.suse.com/1132174","tags":["report"]},{"url":"https://bugzilla.suse.com/1132323","tags":["report"]},{"url":"https://bugzilla.suse.com/1132455","tags":["report"]},{"url":"https://bugzilla.suse.com/1132663","tags":["report"]},{"url":"https://bugzilla.suse.com/1132900","tags":["report"]},{"url":"https://bugzilla.suse.com/1135009","tags":["report"]},{"url":"https://bugzilla.suse.com/1136444","tags":["report"]},{"url":"https://bugzilla.suse.com/1138666","tags":["report"]},{"url":"https://bugzilla.suse.com/1138715","tags":["report"]},{"url":"https://bugzilla.suse.com/1138746","tags":["report"]},{"url":"https://bugzilla.suse.com/1139915","tags":["report"]},{"url":"https://bugzilla.suse.com/1140255","tags":["report"]},{"url":"https://bugzilla.suse.com/1141168","tags":["report"]},{"url":"https://bugzilla.suse.com/1142899","tags":["report"]},{"url":"https://bugzilla.suse.com/1143033","tags":["report"]},{"url":"https://bugzilla.suse.com/1143454","tags":["report"]},{"url":"https://bugzilla.suse.com/1143893","tags":["report"]},{"url":"https://bugzilla.suse.com/1144506","tags":["report"]},{"url":"https://bugzilla.suse.com/1149686","tags":["report"]},{"url":"https://bugzilla.suse.com/1149792","tags":["report"]},{"url":"https://bugzilla.suse.com/1150003","tags":["report"]},{"url":"https://bugzilla.suse.com/1150190","tags":["report"]},{"url":"https://bugzilla.suse.com/1150250","tags":["report"]},{"url":"https://bugzilla.suse.com/1150895","tags":["report"]},{"url":"https://bugzilla.suse.com/1153830","tags":["report"]},{"url":"https://bugzilla.suse.com/1155815","tags":["report"]},{"url":"https://bugzilla.suse.com/1156677","tags":["report"]},{"url":"https://bugzilla.suse.com/1156694","tags":["report"]},{"url":"https://bugzilla.suse.com/1156908","tags":["report"]},{"url":"https://bugzilla.suse.com/1157104","tags":["report"]},{"url":"https://bugzilla.suse.com/1157354","tags":["report"]},{"url":"https://bugzilla.suse.com/1158809","tags":["report"]},{"url":"https://bugzilla.suse.com/1159235","tags":["report"]},{"url":"https://bugzilla.suse.com/1159538","tags":["report"]},{"url":"https://bugzilla.suse.com/1160163","tags":["report"]},{"url":"https://bugzilla.suse.com/1161557","tags":["report"]},{"url":"https://bugzilla.suse.com/1161770","tags":["report"]},{"url":"https://bugzilla.suse.com/1162224","tags":["report"]},{"url":"https://bugzilla.suse.com/1162367","tags":["report"]},{"url":"https://bugzilla.suse.com/1162743","tags":["report"]},{"url":"https://bugzilla.suse.com/1163978","tags":["report"]},{"url":"https://bugzilla.suse.com/1164310","tags":["report"]},{"url":"https://bugzilla.suse.com/1165439","tags":["report"]},{"url":"https://bugzilla.suse.com/1165578","tags":["report"]},{"url":"https://bugzilla.suse.com/1165730","tags":["report"]},{"url":"https://bugzilla.suse.com/1165823","tags":["report"]},{"url":"https://bugzilla.suse.com/1165960","tags":["report"]},{"url":"https://bugzilla.suse.com/1166139","tags":["report"]},{"url":"https://bugzilla.suse.com/1166758","tags":["report"]},{"url":"https://bugzilla.suse.com/1167008","tags":["report"]},{"url":"https://bugzilla.suse.com/1167501","tags":["report"]},{"url":"https://bugzilla.suse.com/1167732","tags":["report"]},{"url":"https://bugzilla.suse.com/1167746","tags":["report"]},{"url":"https://bugzilla.suse.com/1168480","tags":["report"]},{"url":"https://bugzilla.suse.com/1168973","tags":["report"]},{"url":"https://bugzilla.suse.com/1169489","tags":["report"]},{"url":"https://bugzilla.suse.com/1170175","tags":["report"]},{"url":"https://bugzilla.suse.com/1170863","tags":["report"]},{"url":"https://bugzilla.suse.com/1171368","tags":["report"]},{"url":"https://bugzilla.suse.com/1171561","tags":["report"]},{"url":"https://bugzilla.suse.com/1172226","tags":["report"]},{"url":"https://bugzilla.suse.com/1172908","tags":["report"]},{"url":"https://bugzilla.suse.com/1172928","tags":["report"]},{"url":"https://bugzilla.suse.com/1173226","tags":["report"]},{"url":"https://bugzilla.suse.com/1173356","tags":["report"]},{"url":"https://bugzilla.suse.com/1174009","tags":["report"]},{"url":"https://bugzilla.suse.com/1174091","tags":["report"]},{"url":"https://bugzilla.suse.com/1174514","tags":["report"]},{"url":"https://bugzilla.suse.com/1175729","tags":["report"]},{"url":"https://bugzilla.suse.com/1176116","tags":["report"]},{"url":"https://bugzilla.suse.com/1176129","tags":["report"]},{"url":"https://bugzilla.suse.com/1176134","tags":["report"]},{"url":"https://bugzilla.suse.com/1176232","tags":["report"]},{"url":"https://bugzilla.suse.com/1176256","tags":["report"]},{"url":"https://bugzilla.suse.com/1176257","tags":["report"]},{"url":"https://bugzilla.suse.com/1176258","tags":["report"]},{"url":"https://bugzilla.suse.com/1176259","tags":["report"]},{"url":"https://bugzilla.suse.com/1176262","tags":["report"]},{"url":"https://bugzilla.suse.com/1176389","tags":["report"]},{"url":"https://bugzilla.suse.com/1176785","tags":["report"]},{"url":"https://bugzilla.suse.com/1176977","tags":["report"]},{"url":"https://bugzilla.suse.com/1177120","tags":["report"]},{"url":"https://bugzilla.suse.com/1177127","tags":["report"]},{"url":"https://bugzilla.suse.com/1177559","tags":["report"]},{"url":"https://bugzilla.suse.com/1178168","tags":["report"]},{"url":"https://bugzilla.suse.com/1178341","tags":["report"]},{"url":"https://bugzilla.suse.com/1178670","tags":["report"]},{"url":"https://bugzilla.suse.com/1179491","tags":["report"]},{"url":"https://bugzilla.suse.com/1179562","tags":["report"]},{"url":"https://bugzilla.suse.com/1179630","tags":["report"]},{"url":"https://bugzilla.suse.com/1179805","tags":["report"]},{"url":"https://bugzilla.suse.com/1180125","tags":["report"]},{"url":"https://bugzilla.suse.com/1180781","tags":["report"]},{"url":"https://bugzilla.suse.com/1181126","tags":["report"]},{"url":"https://bugzilla.suse.com/1181324","tags":["report"]},{"url":"https://bugzilla.suse.com/1181944","tags":["report"]},{"url":"https://bugzilla.suse.com/1182066","tags":["report"]},{"url":"https://bugzilla.suse.com/1182211","tags":["report"]},{"url":"https://bugzilla.suse.com/1182244","tags":["report"]},{"url":"https://bugzilla.suse.com/1182264","tags":["report"]},{"url":"https://bugzilla.suse.com/1182331","tags":["report"]},{"url":"https://bugzilla.suse.com/1182333","tags":["report"]},{"url":"https://bugzilla.suse.com/1182379","tags":["report"]},{"url":"https://bugzilla.suse.com/1182963","tags":["report"]},{"url":"https://bugzilla.suse.com/1183059","tags":["report"]},{"url":"https://bugzilla.suse.com/1183374","tags":["report"]},{"url":"https://bugzilla.suse.com/1183858","tags":["report"]},{"url":"https://bugzilla.suse.com/1184505","tags":["report"]},{"url":"https://bugzilla.suse.com/1185588","tags":["report"]},{"url":"https://bugzilla.suse.com/1185706","tags":["report"]},{"url":"https://bugzilla.suse.com/1185748","tags":["report"]},{"url":"https://bugzilla.suse.com/1186738","tags":["report"]},{"url":"https://bugzilla.suse.com/1187045","tags":["report"]},{"url":"https://bugzilla.suse.com/1189521","tags":["report"]},{"url":"https://bugzilla.suse.com/1190781","tags":["report"]},{"url":"https://bugzilla.suse.com/1193357","tags":["report"]},{"url":"https://bugzilla.suse.com/356549","tags":["report"]},{"url":"https://bugzilla.suse.com/381844","tags":["report"]},{"url":"https://bugzilla.suse.com/394317","tags":["report"]},{"url":"https://bugzilla.suse.com/408865","tags":["report"]},{"url":"https://bugzilla.suse.com/428177","tags":["report"]},{"url":"https://bugzilla.suse.com/430141","tags":["report"]},{"url":"https://bugzilla.suse.com/431945","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/442740","tags":["report"]},{"url":"https://bugzilla.suse.com/459468","tags":["report"]},{"url":"https://bugzilla.suse.com/489641","tags":["report"]},{"url":"https://bugzilla.suse.com/504687","tags":["report"]},{"url":"https://bugzilla.suse.com/509031","tags":["report"]},{"url":"https://bugzilla.suse.com/526319","tags":["report"]},{"url":"https://bugzilla.suse.com/590833","tags":["report"]},{"url":"https://bugzilla.suse.com/610223","tags":["report"]},{"url":"https://bugzilla.suse.com/610642","tags":["report"]},{"url":"https://bugzilla.suse.com/629905","tags":["report"]},{"url":"https://bugzilla.suse.com/637176","tags":["report"]},{"url":"https://bugzilla.suse.com/651003","tags":["report"]},{"url":"https://bugzilla.suse.com/657698","tags":["report"]},{"url":"https://bugzilla.suse.com/658604","tags":["report"]},{"url":"https://bugzilla.suse.com/670526","tags":["report"]},{"url":"https://bugzilla.suse.com/673071","tags":["report"]},{"url":"https://bugzilla.suse.com/693027","tags":["report"]},{"url":"https://bugzilla.suse.com/715423","tags":["report"]},{"url":"https://bugzilla.suse.com/720601","tags":["report"]},{"url":"https://bugzilla.suse.com/743787","tags":["report"]},{"url":"https://bugzilla.suse.com/747125","tags":["report"]},{"url":"https://bugzilla.suse.com/748738","tags":["report"]},{"url":"https://bugzilla.suse.com/749210","tags":["report"]},{"url":"https://bugzilla.suse.com/749213","tags":["report"]},{"url":"https://bugzilla.suse.com/749735","tags":["report"]},{"url":"https://bugzilla.suse.com/750618","tags":["report"]},{"url":"https://bugzilla.suse.com/751718","tags":["report"]},{"url":"https://bugzilla.suse.com/751946","tags":["report"]},{"url":"https://bugzilla.suse.com/751977","tags":["report"]},{"url":"https://bugzilla.suse.com/754447","tags":["report"]},{"url":"https://bugzilla.suse.com/754677","tags":["report"]},{"url":"https://bugzilla.suse.com/761500","tags":["report"]},{"url":"https://bugzilla.suse.com/774710","tags":["report"]},{"url":"https://bugzilla.suse.com/784670","tags":["report"]},{"url":"https://bugzilla.suse.com/784994","tags":["report"]},{"url":"https://bugzilla.suse.com/787526","tags":["report"]},{"url":"https://bugzilla.suse.com/793420","tags":["report"]},{"url":"https://bugzilla.suse.com/799119","tags":["report"]},{"url":"https://bugzilla.suse.com/802184","tags":["report"]},{"url":"https://bugzilla.suse.com/803004","tags":["report"]},{"url":"https://bugzilla.suse.com/809831","tags":["report"]},{"url":"https://bugzilla.suse.com/811890","tags":["report"]},{"url":"https://bugzilla.suse.com/822642","tags":["report"]},{"url":"https://bugzilla.suse.com/825221","tags":["report"]},{"url":"https://bugzilla.suse.com/828513","tags":["report"]},{"url":"https://bugzilla.suse.com/831629","tags":["report"]},{"url":"https://bugzilla.suse.com/832833","tags":["report"]},{"url":"https://bugzilla.suse.com/834601","tags":["report"]},{"url":"https://bugzilla.suse.com/835687","tags":["report"]},{"url":"https://bugzilla.suse.com/839107","tags":["report"]},{"url":"https://bugzilla.suse.com/84331","tags":["report"]},{"url":"https://bugzilla.suse.com/849377","tags":["report"]},{"url":"https://bugzilla.suse.com/855666","tags":["report"]},{"url":"https://bugzilla.suse.com/855676","tags":["report"]},{"url":"https://bugzilla.suse.com/856687","tags":["report"]},{"url":"https://bugzilla.suse.com/857203","tags":["report"]},{"url":"https://bugzilla.suse.com/857850","tags":["report"]},{"url":"https://bugzilla.suse.com/858239","tags":["report"]},{"url":"https://bugzilla.suse.com/867887","tags":["report"]},{"url":"https://bugzilla.suse.com/869945","tags":["report"]},{"url":"https://bugzilla.suse.com/871152","tags":["report"]},{"url":"https://bugzilla.suse.com/872299","tags":["report"]},{"url":"https://bugzilla.suse.com/873351","tags":["report"]},{"url":"https://bugzilla.suse.com/876282","tags":["report"]},{"url":"https://bugzilla.suse.com/876710","tags":["report"]},{"url":"https://bugzilla.suse.com/876712","tags":["report"]},{"url":"https://bugzilla.suse.com/876748","tags":["report"]},{"url":"https://bugzilla.suse.com/880891","tags":["report"]},{"url":"https://bugzilla.suse.com/885662","tags":["report"]},{"url":"https://bugzilla.suse.com/885882","tags":["report"]},{"url":"https://bugzilla.suse.com/889013","tags":["report"]},{"url":"https://bugzilla.suse.com/889363","tags":["report"]},{"url":"https://bugzilla.suse.com/892477","tags":["report"]},{"url":"https://bugzilla.suse.com/892480","tags":["report"]},{"url":"https://bugzilla.suse.com/895129","tags":["report"]},{"url":"https://bugzilla.suse.com/898917","tags":["report"]},{"url":"https://bugzilla.suse.com/901223","tags":["report"]},{"url":"https://bugzilla.suse.com/901277","tags":["report"]},{"url":"https://bugzilla.suse.com/901902","tags":["report"]},{"url":"https://bugzilla.suse.com/902364","tags":["report"]},{"url":"https://bugzilla.suse.com/906878","tags":["report"]},{"url":"https://bugzilla.suse.com/907584","tags":["report"]},{"url":"https://bugzilla.suse.com/908362","tags":["report"]},{"url":"https://bugzilla.suse.com/908372","tags":["report"]},{"url":"https://bugzilla.suse.com/912014","tags":["report"]},{"url":"https://bugzilla.suse.com/912015","tags":["report"]},{"url":"https://bugzilla.suse.com/912018","tags":["report"]},{"url":"https://bugzilla.suse.com/912292","tags":["report"]},{"url":"https://bugzilla.suse.com/912293","tags":["report"]},{"url":"https://bugzilla.suse.com/912294","tags":["report"]},{"url":"https://bugzilla.suse.com/912296","tags":["report"]},{"url":"https://bugzilla.suse.com/912460","tags":["report"]},{"url":"https://bugzilla.suse.com/913229","tags":["report"]},{"url":"https://bugzilla.suse.com/915479","tags":["report"]},{"url":"https://bugzilla.suse.com/917607","tags":["report"]},{"url":"https://bugzilla.suse.com/917759","tags":["report"]},{"url":"https://bugzilla.suse.com/917815","tags":["report"]},{"url":"https://bugzilla.suse.com/919648","tags":["report"]},{"url":"https://bugzilla.suse.com/920236","tags":["report"]},{"url":"https://bugzilla.suse.com/922448","tags":["report"]},{"url":"https://bugzilla.suse.com/922488","tags":["report"]},{"url":"https://bugzilla.suse.com/922496","tags":["report"]},{"url":"https://bugzilla.suse.com/922499","tags":["report"]},{"url":"https://bugzilla.suse.com/922500","tags":["report"]},{"url":"https://bugzilla.suse.com/926597","tags":["report"]},{"url":"https://bugzilla.suse.com/929678","tags":["report"]},{"url":"https://bugzilla.suse.com/929736","tags":["report"]},{"url":"https://bugzilla.suse.com/930189","tags":["report"]},{"url":"https://bugzilla.suse.com/931698","tags":["report"]},{"url":"https://bugzilla.suse.com/931978","tags":["report"]},{"url":"https://bugzilla.suse.com/933898","tags":["report"]},{"url":"https://bugzilla.suse.com/933911","tags":["report"]},{"url":"https://bugzilla.suse.com/934487","tags":["report"]},{"url":"https://bugzilla.suse.com/934489","tags":["report"]},{"url":"https://bugzilla.suse.com/934491","tags":["report"]},{"url":"https://bugzilla.suse.com/934493","tags":["report"]},{"url":"https://bugzilla.suse.com/935856","tags":["report"]},{"url":"https://bugzilla.suse.com/937085","tags":["report"]},{"url":"https://bugzilla.suse.com/937212","tags":["report"]},{"url":"https://bugzilla.suse.com/937492","tags":["report"]},{"url":"https://bugzilla.suse.com/937634","tags":["report"]},{"url":"https://bugzilla.suse.com/937912","tags":["report"]},{"url":"https://bugzilla.suse.com/939456","tags":["report"]},{"url":"https://bugzilla.suse.com/940608","tags":["report"]},{"url":"https://bugzilla.suse.com/942385","tags":["report"]},{"url":"https://bugzilla.suse.com/942751","tags":["report"]},{"url":"https://bugzilla.suse.com/943421","tags":["report"]},{"url":"https://bugzilla.suse.com/944204","tags":["report"]},{"url":"https://bugzilla.suse.com/945455","tags":["report"]},{"url":"https://bugzilla.suse.com/946648","tags":["report"]},{"url":"https://bugzilla.suse.com/947104","tags":["report"]},{"url":"https://bugzilla.suse.com/947357","tags":["report"]},{"url":"https://bugzilla.suse.com/947679","tags":["report"]},{"url":"https://bugzilla.suse.com/948198","tags":["report"]},{"url":"https://bugzilla.suse.com/952871","tags":["report"]},{"url":"https://bugzilla.suse.com/954256","tags":["report"]},{"url":"https://bugzilla.suse.com/954486","tags":["report"]},{"url":"https://bugzilla.suse.com/954690","tags":["report"]},{"url":"https://bugzilla.suse.com/957812","tags":["report"]},{"url":"https://bugzilla.suse.com/957813","tags":["report"]},{"url":"https://bugzilla.suse.com/957815","tags":["report"]},{"url":"https://bugzilla.suse.com/958501","tags":["report"]},{"url":"https://bugzilla.suse.com/961334","tags":["report"]},{"url":"https://bugzilla.suse.com/962291","tags":["report"]},{"url":"https://bugzilla.suse.com/963415","tags":["report"]},{"url":"https://bugzilla.suse.com/963974","tags":["report"]},{"url":"https://bugzilla.suse.com/964204","tags":["report"]},{"url":"https://bugzilla.suse.com/964472","tags":["report"]},{"url":"https://bugzilla.suse.com/964474","tags":["report"]},{"url":"https://bugzilla.suse.com/965830","tags":["report"]},{"url":"https://bugzilla.suse.com/967128","tags":["report"]},{"url":"https://bugzilla.suse.com/968046","tags":["report"]},{"url":"https://bugzilla.suse.com/968047","tags":["report"]},{"url":"https://bugzilla.suse.com/968048","tags":["report"]},{"url":"https://bugzilla.suse.com/968050","tags":["report"]},{"url":"https://bugzilla.suse.com/968265","tags":["report"]},{"url":"https://bugzilla.suse.com/968270","tags":["report"]},{"url":"https://bugzilla.suse.com/968374","tags":["report"]},{"url":"https://bugzilla.suse.com/968601","tags":["report"]},{"url":"https://bugzilla.suse.com/975875","tags":["report"]},{"url":"https://bugzilla.suse.com/976942","tags":["report"]},{"url":"https://bugzilla.suse.com/977584","tags":["report"]},{"url":"https://bugzilla.suse.com/977614","tags":["report"]},{"url":"https://bugzilla.suse.com/977615","tags":["report"]},{"url":"https://bugzilla.suse.com/977616","tags":["report"]},{"url":"https://bugzilla.suse.com/977663","tags":["report"]},{"url":"https://bugzilla.suse.com/978224","tags":["report"]},{"url":"https://bugzilla.suse.com/981848","tags":["report"]},{"url":"https://bugzilla.suse.com/982268","tags":["report"]},{"url":"https://bugzilla.suse.com/982575","tags":["report"]},{"url":"https://bugzilla.suse.com/983249","tags":["report"]},{"url":"https://bugzilla.suse.com/984323","tags":["report"]},{"url":"https://bugzilla.suse.com/985054","tags":["report"]},{"url":"https://bugzilla.suse.com/988086","tags":["report"]},{"url":"https://bugzilla.suse.com/990207","tags":["report"]},{"url":"https://bugzilla.suse.com/990392","tags":["report"]},{"url":"https://bugzilla.suse.com/990419","tags":["report"]},{"url":"https://bugzilla.suse.com/990428","tags":["report"]},{"url":"https://bugzilla.suse.com/991193","tags":["report"]},{"url":"https://bugzilla.suse.com/991877","tags":["report"]},{"url":"https://bugzilla.suse.com/992120","tags":["report"]},{"url":"https://bugzilla.suse.com/992988","tags":["report"]},{"url":"https://bugzilla.suse.com/992989","tags":["report"]},{"url":"https://bugzilla.suse.com/992992","tags":["report"]},{"url":"https://bugzilla.suse.com/993130","tags":["report"]},{"url":"https://bugzilla.suse.com/993819","tags":["report"]},{"url":"https://bugzilla.suse.com/993825","tags":["report"]},{"url":"https://bugzilla.suse.com/993968","tags":["report"]},{"url":"https://bugzilla.suse.com/994749","tags":["report"]},{"url":"https://bugzilla.suse.com/994844","tags":["report"]},{"url":"https://bugzilla.suse.com/994910","tags":["report"]},{"url":"https://bugzilla.suse.com/995075","tags":["report"]},{"url":"https://bugzilla.suse.com/995324","tags":["report"]},{"url":"https://bugzilla.suse.com/995359","tags":["report"]},{"url":"https://bugzilla.suse.com/995377","tags":["report"]},{"url":"https://bugzilla.suse.com/995959","tags":["report"]},{"url":"https://bugzilla.suse.com/996255","tags":["report"]},{"url":"https://bugzilla.suse.com/997043","tags":["report"]},{"url":"https://bugzilla.suse.com/997614","tags":["report"]},{"url":"https://bugzilla.suse.com/998190","tags":["report"]},{"url":"https://bugzilla.suse.com/999665","tags":["report"]},{"url":"https://bugzilla.suse.com/999666","tags":["report"]},{"url":"https://bugzilla.suse.com/999668","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150769-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/860332","tags":["report"]},{"url":"https://bugzilla.suse.com/861014","tags":["report"]},{"url":"https://bugzilla.suse.com/864912","tags":["report"]},{"url":"https://bugzilla.suse.com/889812","tags":["report"]},{"url":"https://bugzilla.suse.com/890764","tags":["report"]},{"url":"https://bugzilla.suse.com/890767","tags":["report"]},{"url":"https://bugzilla.suse.com/890768","tags":["report"]},{"url":"https://bugzilla.suse.com/890769","tags":["report"]},{"url":"https://bugzilla.suse.com/890770","tags":["report"]},{"url":"https://bugzilla.suse.com/922501","tags":["report"]},{"url":"https://bugzilla.suse.com/923384","tags":["report"]},{"url":"https://bugzilla.suse.com/934494","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0292","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150182-2/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/758060","tags":["report"]},{"url":"https://bugzilla.suse.com/905106","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150541-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150543-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150545-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/779952","tags":["report"]},{"url":"https://bugzilla.suse.com/802648","tags":["report"]},{"url":"https://bugzilla.suse.com/802746","tags":["report"]},{"url":"https://bugzilla.suse.com/859228","tags":["report"]},{"url":"https://bugzilla.suse.com/859924","tags":["report"]},{"url":"https://bugzilla.suse.com/862181","tags":["report"]},{"url":"https://bugzilla.suse.com/870192","tags":["report"]},{"url":"https://bugzilla.suse.com/892403","tags":["report"]},{"url":"https://bugzilla.suse.com/915976","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5146","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150545-2/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/879179","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150546-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150547-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150553-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150553-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150578-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151182-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151182-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151183-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151183-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151184-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/608666","tags":["report"]},{"url":"https://bugzilla.suse.com/657663","tags":["report"]},{"url":"https://bugzilla.suse.com/716144","tags":["report"]},{"url":"https://bugzilla.suse.com/739719","tags":["report"]},{"url":"https://bugzilla.suse.com/742821","tags":["report"]},{"url":"https://bugzilla.suse.com/743344","tags":["report"]},{"url":"https://bugzilla.suse.com/755395","tags":["report"]},{"url":"https://bugzilla.suse.com/761324","tags":["report"]},{"url":"https://bugzilla.suse.com/761838","tags":["report"]},{"url":"https://bugzilla.suse.com/767256","tags":["report"]},{"url":"https://bugzilla.suse.com/768097","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-5095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2333","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151184-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151185-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-su-403/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-su-403 forbidden-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0289","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2537-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0293","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3711","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-0289","description":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.","status":"published","published":"2015-03-19T00:00:00Z","modified":"2024-08-06T04:03:10.842Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0302","description":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.","status":"published","published":"2015-03-19T00:00:00Z","modified":"2024-08-06T04:03:10Z","updated_at":"2026-11-03T02:22:20.481932Z"}],"ghsa":[{"id":"GHSA-cxc6-qvvg-mcqm","title":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,...","description":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.","status":"published","published":"2022-05-17T00:32:13Z","modified":"2025-04-12T12:47:28Z","updated_at":"2026-11-02T15:01:21.34906Z"}],"nvd":[{"id":"CVE-2015-0289","description":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.","status":"published","published":"2015-03-19T22:59:07.833Z","modified":"2026-06-17T00:19:55.19Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:03.313464Z"}],"osv":[{"id":"BELL-CVE-2015-0289","title":"CVE-2015-0289 does not affect BellSoft software","status":"withdrawn","published":"2015-03-19T22:59:00Z","modified":"2026-01-28T07:21:37.307639Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"RHSA-2015:0800","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T22:24:46Z","modified":"2026-08-05T10:03:12Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"CVE-2015-0289","description":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.","status":"published","published":"2015-03-19T22:59:07Z","modified":"2026-04-16T06:19:51.542644672Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-0289","description":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.","status":"published","published":"2015-03-19T22:59:07.833Z","modified":"2026-09-09T06:47:23.456512209Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DLA-177-1","title":"openssl - security update","status":"published","published":"2015-03-20T00:00:00Z","modified":"2026-03-09T01:20:53.80736Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3197-1","title":"openssl - security update","status":"published","published":"2015-03-19T00:00:00Z","modified":"2026-03-09T01:18:12.939703Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0111","title":"Updated openssl packages fix security vulnerabilities","description":"Updated openssl packages fix security vulnerabilities:\n\nThe function ASN1_TYPE_cmp will crash with an invalid read if an attempt is\nmade to compare ASN.1 boolean types. Since ASN1_TYPE_cmp is used to check\ncertificate signature algorithm consistency this can be used to crash any\ncertificate verification operation and exploited in a DoS attack. Any\napplication which performs certificate verification is vulnerable including\nOpenSSL clients and servers which enable client authentication\n(CVE-2015-0286).\n\nReusing a structure in ASN.1 parsing may allow an attacker to cause\nmemory corruption via an invalid write. Such reuse is and has been\nstrongly discouraged and is believed to be rare. Certificate parsing,\nOpenSSL clients, and OpenSSL servers are not affected (CVE-2015-0287).\n\nThe PKCS#7 parsing code does not handle missing outer ContentInfo correctly.\nAn attacker can craft malformed ASN.1-encoded PKCS#7 blobs with\nmissing content and trigger a NULL pointer dereference on parsing.\nOpenSSL clients and servers are not affected (CVE-2015-0289).\n\nA malicious client can trigger an OPENSSL_assert (i.e., an abort) in\nservers that both support SSLv2 and enable export cipher suites by sending\na specially crafted SSLv2 CLIENT-MASTER-KEY message (CVE-2015-0293).\n\nA malformed EC private key file consumed via the d2i_ECPrivateKey function\ncould cause a use after free condition. This, in turn, could cause a double\nfree in several private key parsing functions (such as d2i_PrivateKey\nor EVP_PKCS82PKEY) and could lead to a DoS attack or memory corruption\nfor applications that receive EC private keys from untrusted\nsources. This scenario is considered rare (CVE-2015-0209).\n\nThe function X509_to_X509_REQ will crash with a NULL pointer dereference if\nthe certificate key is invalid. This function is rarely used in practice\n(CVE-2015-0288).\n","status":"published","published":"2015-03-19T16:47:16Z","modified":"2026-04-16T06:24:56.693807141Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10271-1","title":"libopenssl-devel-1.0.2j-2.2 on GA media","description":"These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:51.178222Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10309-1","title":"libcrypto38-2.5.0-1.1 on GA media","description":"These are all security issues fixed in the libcrypto38-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:24:08.668011Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10529-1","title":"libopenssl1_0_0-steam-1.0.2h-4.1 on GA media","description":"These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:26.599598Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11127-1","title":"libopenssl-1_1-devel-1.1.1l-1.2 on GA media","description":"These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:19.520287Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"RHSA-2015:0715","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T22:24:35Z","modified":"2026-09-21T10:01:14Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0716","title":"Red Hat Security Advisory: openssl security and bug fix update","status":"published","published":"2024-09-15T22:24:29Z","modified":"2026-09-21T10:01:14Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:0752","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T22:24:40Z","modified":"2026-09-21T10:01:15Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-FU-2022:0445-1","title":"Feature update for venv-salt-minion","description":"This feature update for venv-salt-minion provides the following changes:\n\n- Introduce `venv-salt-minion`.\n- Mention fixed issues provided with the bundle.\n  ","status":"published","published":"2022-02-16T15:23:18Z","modified":"2026-02-04T02:38:14.687149Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-RU-2015:0769-1","title":"Security update for openssl1","description":"\nThis OpenSSL update fixes the following issues:\n\n    * SRTP Memory Leak (CVE-2014-3513)\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513\u003e\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-22T23:22:56Z","modified":"2026-02-04T02:44:28.505462Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0182-2","title":"Security update for compat-openssl097g","description":"\nThis compat-openssl097g rollup update contains various security fixes:\n\n    * CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL\n      can result in memory corruption during buffer management operations.\n\nSecurity Issue reference:\n\n    * CVE-2012-2110\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110\u003e\n\n","status":"published","published":"2012-08-30T22:56:05Z","modified":"2026-02-04T02:20:49.976804Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0541-1","title":"Security update for openssl","description":"\nOpenSSL was updated to fix various security issues.\n\nFollowing security issues were fixed:\n- CVE-2015-0209: A Use After Free following d2i_ECPrivatekey error\n  was fixed which could lead to crashes for attacker supplied Elliptic\n  Curve keys. This could be exploited over SSL connections with client\n  supplied keys.\n\n- CVE-2015-0286: A segmentation fault in ASN1_TYPE_cmp was fixed that\n  could be exploited by attackers when e.g. client authentication is\n  used. This could be exploited over SSL connections.\n\n- CVE-2015-0287: A ASN.1 structure reuse memory corruption was fixed. This\n  problem can not be exploited over regular SSL connections, only if\n  specific client programs use specific ASN.1 routines.\n\n- CVE-2015-0288: A X509_to_X509_REQ NULL pointer dereference was fixed,\n  which could lead to crashes. This function is not commonly used, and\n  not reachable over SSL methods.\n\n- CVE-2015-0289: Several PKCS7 NULL pointer dereferences were fixed,\n  which could lead to crashes of programs using the PKCS7 APIs. The SSL\n  apis do not use those by default.\n\n- CVE-2015-0293: Denial of service via reachable assert in SSLv2 servers,\n  could be used by remote attackers to terminate the server process. Note\n  that this requires SSLv2 being allowed, which is not the default.\n","status":"published","published":"2015-03-18T14:19:20Z","modified":"2026-02-04T02:58:18.555137Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0543-1","title":"Security update for compat-openssl097g","description":"\nThis compat-openssl097g rollup update contains various security fixes:\n\n    * CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL\n      can result in memory corruption during buffer management operations.\n\nSecurity Issue reference:\n\n    * CVE-2012-2110\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110\u003e\n\n","status":"published","published":"2012-08-30T22:56:05Z","modified":"2026-02-04T03:48:17.665325Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0545-1","title":"Security update for OpenSSL","description":"\nOpenSSL has been updated to fix several security issues:\n\n    * CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL\n      compression by default. Setting the environment variable\n      'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.\n    * CVE-2013-0169: Timing attacks against TLS could be used by physically\n      local attackers to gain access to transmitted plain text or private\n      keymaterial. This issue is also known as the 'Lucky-13' issue.\n    * CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.\n\nSecurity Issue references:\n\n    * CVE-2013-0169\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169\u003e\n    * CVE-2013-0166\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166\u003e\n\n","status":"published","published":"2013-03-25T15:10:09Z","modified":"2026-02-04T03:54:49.726473Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0545-2","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T03:31:48.188461Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0546-1","title":"Security update for openssl1","description":"\nThis OpenSSL update fixes the following issues:\n\n    * SRTP Memory Leak (CVE-2014-3513)\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513\u003e\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-22T23:22:56Z","modified":"2026-02-04T03:02:18.565758Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0547-1","title":"Security update for compat-openssl097g","description":"\nOpenSSL was updated to fix several security issues:\n\n    * CVE-2015-4000: The Logjam Attack ( weakdh.org ) has been addressed by\n      rejecting connections with DH parameters shorter than 1024 bits.\n      2048-bit DH parameters are now generated by default.\n    * CVE-2015-1789: An out-of-bounds read in X509_cmp_time was fixed.\n    * CVE-2015-1790: A PKCS7 decoder crash with missing EnvelopedContent\n      was fixed.\n    * Fixed a timing side channel in RSA decryption. (bsc#929678)\n\nAdditional changes:\n\n    * In the default SSL cipher string EXPORT ciphers are now disabled.\n      This will only get active if applications get rebuilt and actually\n      use this string. (bsc#931698)\n\nSecurity Issues:\n\n    * CVE-2015-1789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789\u003e\n    * CVE-2015-1790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790\u003e\n    * CVE-2015-4000\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000\u003e\n\n","status":"published","published":"2015-06-19T09:33:13Z","modified":"2026-02-04T03:59:22.720712Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0553-1","title":"Security update for compat-openssl098","description":"OpenSSL was updated to fix various security issues.\n\nFollowing security issues were fixed:\n- CVE-2015-0209: A Use After Free following d2i_ECPrivatekey error\n  was fixed which could lead to crashes for attacker supplied Elliptic\n  Curve keys. This could be exploited over SSL connections with client\n  supplied keys.\n\n- CVE-2015-0286: A segmentation fault in ASN1_TYPE_cmp was fixed that\n  could be exploited by attackers when e.g. client authentication is\n  used. This could be exploited over SSL connections.\n\n- CVE-2015-0287: A ASN.1 structure reuse memory corruption was fixed. This\n  problem can not be exploited over regular SSL connections, only if\n  specific client programs use specific ASN.1 routines.\n\n- CVE-2015-0288: A X509_to_X509_REQ NULL pointer dereference was fixed,\n  which could lead to crashes. This function is not commonly used, and\n  not reachable over SSL methods.\n\n- CVE-2015-0289: Several PKCS7 NULL pointer dereferences were fixed,\n  which could lead to crashes of programs using the PKCS7 APIs. The SSL\n  apis do not use those by default.\n\n- CVE-2015-0292: Various issues in base64 decoding were fixed, which\n  could lead to crashes with memory corruption, for instance by using\n  attacker supplied PEM data.\n\n- CVE-2015-0293: Denial of service via reachable assert in SSLv2 servers,\n  could be used by remote attackers to terminate the server process. Note\n  that this requires SSLv2 being allowed, which is not the default.\n\n- CVE-2009-5146: A memory leak in the TLS hostname extension was fixed,\n  which could be used by remote attackers to run SSL services out of memory.\n","status":"published","published":"2015-03-18T18:42:02Z","modified":"2026-02-04T03:26:55.889326Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0553-2","title":"Security update for compat-openssl098","description":"OpenSSL was updated to fix various security issues.\n\nFollowing security issues were fixed:\n- CVE-2015-0209: A Use After Free following d2i_ECPrivatekey error\n  was fixed which could lead to crashes for attacker supplied Elliptic\n  Curve keys. This could be exploited over SSL connections with client\n  supplied keys.\n\n- CVE-2015-0286: A segmentation fault in ASN1_TYPE_cmp was fixed that\n  could be exploited by attackers when e.g. client authentication is\n  used. This could be exploited over SSL connections.\n\n- CVE-2015-0287: A ASN.1 structure reuse memory corruption was fixed. This\n  problem can not be exploited over regular SSL connections, only if\n  specific client programs use specific ASN.1 routines.\n\n- CVE-2015-0288: A X509_to_X509_REQ NULL pointer dereference was fixed,\n  which could lead to crashes. This function is not commonly used, and\n  not reachable over SSL methods.\n\n- CVE-2015-0289: Several PKCS7 NULL pointer dereferences were fixed,\n  which could lead to crashes of programs using the PKCS7 APIs. The SSL\n  apis do not use those by default.\n\n- CVE-2015-0292: Various issues in base64 decoding were fixed, which\n  could lead to crashes with memory corruption, for instance by using\n  attacker supplied PEM data.\n\n- CVE-2015-0293: Denial of service via reachable assert in SSLv2 servers,\n  could be used by remote attackers to terminate the server process. Note\n  that this requires SSLv2 being allowed, which is not the default.\n\n- CVE-2009-5146: A memory leak in the TLS hostname extension was fixed,\n  which could be used by remote attackers to run SSL services out of memory.\n","status":"published","published":"2015-03-18T18:42:03Z","modified":"2026-02-04T03:41:33.508159Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0578-1","title":"Security update for compat-openssl097g","description":"\nThis compat-openssl097g rollup update contains various security fixes:\n\n    * CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL\n      could have resulted in memory corruption during buffer management\n      operations.\n\nSecurity Issue reference:\n\n    * CVE-2012-2110\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110\u003e\n\n","status":"published","published":"2012-08-30T22:56:05Z","modified":"2026-02-04T02:13:21.203937Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1182-1","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T02:26:57.132285Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1182-2","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T04:33:49.202673Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1183-1","title":"Security update for compat-openssl097g","description":"\nThis compat-openssl097g rollup update contains various security fixes:\n\n    * CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL\n      could have resulted in memory corruption during buffer management\n      operations.\n\nSecurity Issue reference:\n\n    * CVE-2012-2110\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110\u003e\n\n","status":"published","published":"2012-08-30T22:56:05Z","modified":"2026-02-04T02:22:12.859082Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1183-2","title":"Security update for compat-openssl097g","description":"\nOpenSSL was updated to fix several security issues:\n\n    * CVE-2015-4000: The Logjam Attack ( weakdh.org ) has been addressed by\n      rejecting connections with DH parameters shorter than 1024 bits.\n      2048-bit DH parameters are now generated by default.\n    * CVE-2015-1789: An out-of-bounds read in X509_cmp_time was fixed.\n    * CVE-2015-1790: A PKCS7 decoder crash with missing EnvelopedContent\n      was fixed.\n    * Fixed a timing side channel in RSA decryption. (bsc#929678)\n\nAdditional changes:\n\n    * In the default SSL cipher string EXPORT ciphers are now disabled.\n      This will only get active if applications get rebuilt and actually\n      use this string. (bsc#931698)\n\nSecurity Issues:\n\n    * CVE-2015-1789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789\u003e\n    * CVE-2015-1790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790\u003e\n    * CVE-2015-4000\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000\u003e\n\n","status":"published","published":"2015-06-19T09:33:13Z","modified":"2026-02-04T02:14:08.577666Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1184-1","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T03:17:21.888768Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1184-2","title":"Security update for OpenSSL","description":"\nOpenSSL has been updated to fix several security issues:\n\n    * CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL\n      compression by default. Setting the environment variable\n      'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.\n    * CVE-2013-0169: Timing attacks against TLS could be used by physically\n      local attackers to gain access to transmitted plain text or private\n      keymaterial. This issue is also known as the 'Lucky-13' issue.\n    * CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.\n\nSecurity Issue references:\n\n    * CVE-2013-0169\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169\u003e\n    * CVE-2013-0166\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166\u003e\n\n","status":"published","published":"2013-03-25T15:10:09Z","modified":"2025-05-02T04:03:49.369385Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1185-1","title":"Security update for openssl1","description":"\nThis OpenSSL update fixes the following issues:\n\n    * SRTP Memory Leak (CVE-2014-3513)\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513\u003e\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-22T23:22:56Z","modified":"2026-02-04T04:18:15.95367Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-403","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T02:43:34.868415Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-403 Forbidden-1","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T03:35:11.255833Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"UBUNTU-CVE-2015-0289","description":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.","status":"published","published":"2015-03-17T00:00:00Z","modified":"2026-04-22T10:00:05.323597Z","updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"USN-2537-1","title":"openssl vulnerabilities","description":"It was discovered that OpenSSL incorrectly handled malformed EC private key\nfiles. A remote attacker could possibly use this issue to cause OpenSSL to\ncrash, resulting in a denial of service, or execute arbitrary code.\n(CVE-2015-0209)\n\nStephen Henson discovered that OpenSSL incorrectly handled comparing ASN.1\nboolean types. A remote attacker could possibly use this issue to cause\nOpenSSL to crash, resulting in a denial of service. (CVE-2015-0286)\n\nEmilia Käsper discovered that OpenSSL incorrectly handled ASN.1 structure\nreuse. A remote attacker could possibly use this issue to cause OpenSSL to\ncrash, resulting in a denial of service, or execute arbitrary code.\n(CVE-2015-0287)\n\nBrian Carpenter discovered that OpenSSL incorrectly handled invalid\ncertificate keys. A remote attacker could possibly use this issue to cause\nOpenSSL to crash, resulting in a denial of service. (CVE-2015-0288)\n\nMichal Zalewski discovered that OpenSSL incorrectly handled missing outer\nContentInfo when parsing PKCS#7 structures. A remote attacker could\npossibly use this issue to cause OpenSSL to crash, resulting in a denial of\nservice, or execute arbitrary code. (CVE-2015-0289)\n\nRobert Dugal and David Ramos discovered that OpenSSL incorrectly handled\ndecoding Base64 encoded data. A remote attacker could possibly use this\nissue to cause OpenSSL to crash, resulting in a denial of service, or\nexecute arbitrary code. (CVE-2015-0292)\n\nSean Burford and Emilia Käsper discovered that OpenSSL incorrectly handled\nspecially crafted SSLv2 CLIENT-MASTER-KEY messages. A remote attacker could\npossibly use this issue to cause OpenSSL to crash, resulting in a denial of\nservice. (CVE-2015-0293)\n","status":"published","published":"2015-03-19T17:10:25Z","modified":"2026-04-22T09:09:31.197883Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}