{"id":"CVE-2018-0495","aliases":["ALPINE-CVE-2018-0495","BELL-CVE-2018-0495","DEBIAN-CVE-2018-0495","DLA-1405-1","DSA-4231-1","EUVD-2018-1318","GHSA-q2v2-pgm4-m8c8","MGASA-2018-0301","MGASA-2018-0306","MGASA-2019-0038","RHSA-2018:3221","RHSA-2019:1297","RHSA-2019:2237","RHSA-2020:1267","RHSA-2020:1345","RHSA-2020:1461","SUSE-SU-2018:1993-1","SUSE-SU-2018:2089-1","SUSE-SU-2018:2452-2","SUSE-SU-2018:4235-1","SUSE-SU-2018:4236-1","SUSE-SU-2018:4236-2","UBUNTU-CVE-2018-0495","USN-3689-1","USN-3692-1","USN-3850-1","openSUSE-SU-2024:10941-1","openSUSE-SU-2024:11058-1"],"status":"published","title":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...","description":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.","severity":{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00869,"percentile":0.59046,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203"],"published":"2018-06-13T00:00:00Z","modified":"2026-10-24T10:30:26Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libgcrypt","fixed_in":["1.7.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libgcrypt","fixed_in":["1.7.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libgcrypt","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"libressl","fixed_in":["2.7.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libressl","fixed_in":["2.7.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libressl","fixed_in":["2.7.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libressl","fixed_in":["2.7.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libressl","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libressl","fixed_in":["2.7.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libressl","fixed_in":["2.7.4-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libgcrypt20","fixed_in":["1.8.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgcrypt20","fixed_in":["1.8.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgcrypt20","fixed_in":["1.8.3-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libgcrypt20","fixed_in":["1.6.3-2+deb8u5"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"libgcrypt20","fixed_in":["1.7.6-2+deb9u3"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"libgcrypt","fixed_in":["1.7.10-1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"libgcrypt","fixed_in":["1.5.4-5.5.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"nss","fixed_in":["3.36.6-1.1.mga6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libgcrypt","fixed_in":["1.8.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libgcrypt","fixed_in":["1.6.1-16.55.1","1.6.1-16.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libgcrypt","fixed_in":["1.6.1-16.55.1","1.6.1-16.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libgcrypt","fixed_in":["1.6.1-16.55.1","1.6.1-16.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libgcrypt","fixed_in":["1.6.1-16.55.1","1.6.1-16.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libgcrypt","fixed_in":["1.6.1-16.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libgcrypt","fixed_in":["1.6.1-16.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libgcrypt","fixed_in":["1.6.1-16.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libgcrypt","fixed_in":["1.6.1-16.62.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","fixed_in":["1.5.3-2ubuntu4.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"nss","fixed_in":["2:3.28.4-0ubuntu0.14.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.26"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libgcrypt20","fixed_in":["1.6.5-2ubuntu0.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"nss","fixed_in":["2:3.28.4-0ubuntu0.16.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openssl","fixed_in":["1.0.2g-1ubuntu4.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libgcrypt20","fixed_in":["1.8.1-4ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nss","fixed_in":["2:3.35-2ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openssl","fixed_in":["1.1.0g-2ubuntu4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","fixed_in":["1.0.2n-1ubuntu5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.7.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.7.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-2+deb8u5"}]}],"versions":["1.6.3-2","1.6.3-2+deb8u1","1.6.3-2+deb8u2","1.6.3-2+deb8u3","1.6.3-2+deb8u4"]},{"source":"osv","ecosystem":"Debian:9","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-2+deb9u3"}]}],"versions":["1.7.6-2","1.7.6-2+deb9u1","1.7.6-2+deb9u2"]},{"source":"osv","ecosystem":"Mageia:6","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-5.5.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.6-1.1.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-16.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.29-40.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.29-40.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2n-15.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-9.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.0-6.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.55.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.55.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.55.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.55.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-3.3.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-3.7.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0-3.21.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.4.0esr-109.55.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20-19.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.1-58.18.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-2ubuntu4.6"}]}],"versions":["1.5.0-3ubuntu3","1.5.3-2ubuntu1","1.5.3-2ubuntu4","1.5.3-2ubuntu4.1","1.5.3-2ubuntu4.2","1.5.3-2ubuntu4.3","1.5.3-2ubuntu4.4","1.5.3-2ubuntu4.5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.14.04.4"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.2","2:3.17.4-0ubuntu0.14.04.1","2:3.19.2-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.2","2:3.21-0ubuntu0.14.04.1","2:3.21-0ubuntu0.14.04.2","2:3.23-0ubuntu0.14.04.1","2:3.26.2-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.1","2:3.28.4-0ubuntu0.14.04.2","2:3.28.4-0ubuntu0.14.04.3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.26"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-2ubuntu0.5"}]}],"versions":["1.6.3-2ubuntu1","1.6.4-3","1.6.4-4","1.6.4-5","1.6.5-2","1.6.5-2ubuntu0.2","1.6.5-2ubuntu0.3","1.6.5-2ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.4"}]}],"versions":["2:3.19.2-1ubuntu1","2:3.19.2.1-0ubuntu1","2:3.21-1ubuntu2","2:3.21-1ubuntu3","2:3.21-1ubuntu4","2:3.23-0ubuntu0.16.04.1","2:3.26.2-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.1","2:3.28.4-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.13"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-4ubuntu1.1"}]}],"versions":["1.7.8-2ubuntu1","1.7.9-1","1.8.1-4","1.8.1-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.1"}]}],"versions":["2:3.32-1ubuntu3","2:3.34-1ubuntu1","2:3.35-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0g-2ubuntu4.1"}]}],"versions":["1.0.2g-1ubuntu13","1.0.2g-1ubuntu14","1.0.2n-1ubuntu1","1.1.0g-2ubuntu1","1.1.0g-2ubuntu2","1.1.0g-2ubuntu3","1.1.0g-2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.1"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-2ubuntu4.6"}]}],"versions":["1.5.0-3ubuntu3","1.5.3-2ubuntu1","1.5.3-2ubuntu4","1.5.3-2ubuntu4.1","1.5.3-2ubuntu4.2","1.5.3-2ubuntu4.3","1.5.3-2ubuntu4.4","1.5.3-2ubuntu4.5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-2ubuntu0.5"}]}],"versions":["1.6.3-2ubuntu1","1.6.4-3","1.6.4-4","1.6.4-5","1.6.5-2","1.6.5-2ubuntu0.2","1.6.5-2ubuntu0.3","1.6.5-2ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-4ubuntu1.1"}]}],"versions":["1.7.8-2ubuntu1","1.7.9-1","1.8.1-4","1.8.1-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.26"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.13"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0g-2ubuntu4.1"}]}],"versions":["1.0.2g-1ubuntu13","1.0.2g-1ubuntu14","1.0.2n-1ubuntu1","1.1.0g-2ubuntu1","1.1.0g-2ubuntu2","1.1.0g-2ubuntu3","1.1.0g-2ubuntu4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.1"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.14.04.4"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.2","2:3.17.4-0ubuntu0.14.04.1","2:3.19.2-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.2","2:3.21-0ubuntu0.14.04.1","2:3.21-0ubuntu0.14.04.2","2:3.23-0ubuntu0.14.04.1","2:3.26.2-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.1","2:3.28.4-0ubuntu0.14.04.2","2:3.28.4-0ubuntu0.14.04.3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.4"}]}],"versions":["2:3.19.2-1ubuntu1","2:3.19.2.1-0ubuntu1","2:3.21-1ubuntu2","2:3.21-1ubuntu3","2:3.21-1ubuntu4","2:3.23-0ubuntu0.16.04.1","2:3.26.2-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.1","2:3.28.4-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.1"}]}],"versions":["2:3.32-1ubuntu3","2:3.34-1ubuntu1","2:3.35-2ubuntu2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-1.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.69.1-1.2"}]}],"bundled":14}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"gnupg","product":"libgcrypt"},{"vendor":"oracle","product":"traffic_director"},{"vendor":"redhat","product":"ansible_tower"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=9010d1576e278a4274ad3f4aa15776c28f6ba965","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1041144","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://usn.ubuntu.com/3850-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.securitytracker.com/id/1041147","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","article","report"]},{"url":"https://usn.ubuntu.com/3689-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://usn.ubuntu.com/3689-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3692-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/06/msg00013.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4231","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3850-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3692-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://dev.gnupg.org/T4011","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1297","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1296","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1543","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2237","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0495","tags":["advisory"]},{"url":"https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=9010d1576e278a4274ad3f4aa15776c28f6ba965"},{"url":"https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem"},{"url":"https://usn.ubuntu.com/3850-2"},{"url":"https://usn.ubuntu.com/3850-1"},{"url":"https://usn.ubuntu.com/3692-2"},{"url":"https://usn.ubuntu.com/3692-1"},{"url":"https://usn.ubuntu.com/3689-2"},{"url":"https://usn.ubuntu.com/3689-1"},{"url":"https://github.com/advisories/GHSA-q2v2-pgm4-m8c8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-0495","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-0495","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-0495","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0301.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23185","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2018-0306.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23210","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2019-0038.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24179","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1486144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1548401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591100","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603597","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3221.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3735","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20170828.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-0495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0495","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-0732","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0732","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20180612.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-0737","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0737","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2018/04/16/3","tags":["article"]},{"url":"https://www.openssl.org/news/secadv/20180416.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-0739","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0739","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0739","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20180327.txt","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694980","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBCS-620","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1297.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-0211","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0211","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0211","tags":["advisory"]},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.4","tags":["article"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2019-0211","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1212132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1514041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1533729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1639873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1657164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1657913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712876","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2237.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12404","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12404","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17007","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1267","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1774831","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1267.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11745","tags":["advisory"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44.3_release_notes","tags":["article"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47.1_release_notes","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1345","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1345.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1461","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1461.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181993-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1097410","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0495","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182089-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1064455","tags":["report"]},{"url":"https://bugzilla.suse.com/1090766","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182452-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184235-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1106873","tags":["report"]},{"url":"https://bugzilla.suse.com/1119069","tags":["report"]},{"url":"https://bugzilla.suse.com/1119105","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18498","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184236-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184236-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-0495","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3689-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3689-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3692-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3692-2","tags":["advisory"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.38_release_notes","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3850-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3850-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-0732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-0737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12404","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6829","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-0495","description":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.","status":"published","published":"2018-06-13T23:00:00Z","modified":"2026-10-14T06:30:32.757Z","updated_at":"2026-11-02T14:35:12.160284Z"}],"euvd":[{"id":"EUVD-2018-1318","description":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.","status":"published","published":"2018-06-13T23:00:00Z","modified":"2026-10-14T06:30:32Z","updated_at":"2026-11-02T17:27:17.902641Z"}],"ghsa":[{"id":"GHSA-q2v2-pgm4-m8c8","title":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...","description":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.","status":"published","published":"2022-05-13T01:18:24Z","modified":"2026-10-14T09:32:19Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T15:13:23.530725Z"}],"nvd":[{"id":"CVE-2018-0495","description":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.","status":"published","published":"2018-06-13T23:29:00.333Z","modified":"2026-10-14T07:16:41.65Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:04:29.837913Z"}],"osv":[{"id":"ALPINE-CVE-2018-0495","description":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.","status":"published","published":"2018-06-13T23:29:00.333Z","modified":"2026-10-23T17:17:55.143762116Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2018-0495","title":"CVE-2018-0495 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:27.716399Z","modified":"2026-09-04T07:15:07.9560577Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-0495","description":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.","status":"published","published":"2018-06-13T23:29:00.333Z","modified":"2026-10-24T10:30:26.36798203Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2018-0495","description":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.","status":"published","published":"2018-06-13T23:29:00.333Z","modified":"2026-10-15T07:47:33.701769388Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2018:3221","title":"Red Hat Security Advisory: openssl security, bug fix, and enhancement update","status":"published","published":"2024-09-16T01:37:03Z","modified":"2026-10-16T10:01:13Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1297","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP2 security update","status":"published","published":"2024-09-13T19:51:22Z","modified":"2026-10-14T10:01:11Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2237","title":"Red Hat Security Advisory: nss, nss-softokn, nss-util, and nspr security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:16:30Z","modified":"2026-10-14T10:01:15Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2020:1267","title":"Red Hat Security Advisory: nss-softokn security update","status":"published","published":"2024-09-16T03:24:00Z","modified":"2026-10-14T10:01:19Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1345","title":"Red Hat Security Advisory: nss-softokn security update","status":"published","published":"2024-09-16T03:24:08Z","modified":"2026-10-14T10:01:19Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1461","title":"Red Hat Security Advisory: nss-softokn security update","status":"published","published":"2024-09-16T03:24:25Z","modified":"2026-10-14T10:01:20Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2018-0495","description":"Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.","status":"published","published":"2018-06-13T00:00:00Z","modified":"2026-04-22T11:38:07.420187Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DLA-1405-1","title":"libgcrypt20 - security update","status":"published","published":"2018-06-29T00:00:00Z","modified":"2026-03-09T01:01:22.677653Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4231-1","title":"libgcrypt20 - security update","status":"published","published":"2018-06-17T00:00:00Z","modified":"2026-03-09T02:10:32.323138Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0301","title":"Updated libgcrypt packages fix security vulnerability","description":"When libgcrypt uses the private key to create a signature, such as for a\nTLS or SSH connection, it inadvertently leaks information through memory\ncaches. An unprivileged attacker running on the same machine can collect\nthe information from a few thousand signatures and recover the value of\nthe private ECDSA or DSA key (CVE-2018-0495).\n","status":"published","published":"2018-07-01T17:17:14Z","modified":"2026-04-16T06:25:15.695382414Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"MGASA-2018-0306","title":"Updated libcrypt packages fix a security vulnerability","description":"Updated libgcrypt packages fix security vulnerability:\n\nWhen libgcrypt uses the private key to create a signature, such as for a TLS or\nSSH connection, it inadvertently leaks information through memory caches. An\nunprivileged attacker running on the same machine can collect the information\nfrom a few thousand signatures and recover the value of the private ECDSA or\nDSA key (CVE-2018-0495).\n","status":"published","published":"2018-07-01T22:17:47Z","modified":"2026-04-16T06:24:10.726392752Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"MGASA-2019-0038","title":"Updated nss packages fix security vulnerability","description":"Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation.\nA local attacker could possibly use this issue to perform a cache-timing\nattack and recover private ECDSA keys (CVE-2018-0495).\n","status":"published","published":"2019-01-15T22:15:34Z","modified":"2026-04-16T06:26:07.992493941Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:10941-1","title":"libgcrypt-cavs-1.9.4-1.2 on GA media","description":"These are all security issues fixed in the libgcrypt-cavs-1.9.4-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:35:52.263076Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11058-1","title":"libfreebl3-3.69.1-1.2 on GA media","description":"These are all security issues fixed in the libfreebl3-3.69.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:19:08.673425Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:1993-1","title":"Security update for libgcrypt","description":"This update for libgcrypt fixes the following issue:\n\nThe following security issue was fixed:\n\n- CVE-2018-0495: Fixed a novel side-channel attack, by enabling blinding for\n  ECDSA signatures (bsc#1097410)\n","status":"published","published":"2018-07-19T07:28:43Z","modified":"2026-02-04T02:25:50.762997Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2089-1","title":"Security update for libgcrypt","description":"This update for libgcrypt fixes the following issues:\n\nThe following security vulnerability was addressed:\n\n- CVE-2018-0495: Mitigate a novel side-channel attack by enabling blinding for\n  ECDSA signatures (bsc#1097410).\n\nThe following other issues were fixed:\n\n- Extended the fipsdrv dsa-sign and dsa-verify commands with the\n  --algo parameter for the FIPS testing of DSA SigVer and SigGen (bsc#1064455).\n- Ensure libgcrypt20-hmac and libgcrypt20 are installed in the correct order. (bsc#1090766)\n","status":"published","published":"2018-07-27T10:41:20Z","modified":"2026-02-04T02:13:54.304712Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2452-2","title":"Security update for libgcrypt","description":"This update for libgcrypt fixes the following issues:\n\nThe following security vulnerability was addressed:\n\n- CVE-2018-0495: Mitigate a novel side-channel attack by enabling blinding for\n  ECDSA signatures (bsc#1097410).\n\nThe following other issues were fixed:\n\n- Extended the fipsdrv dsa-sign and dsa-verify commands with the\n  --algo parameter for the FIPS testing of DSA SigVer and SigGen (bsc#1064455).\n- Ensure libgcrypt20-hmac and libgcrypt20 are installed in the correct order. (bsc#1090766)\n","status":"published","published":"2018-11-23T16:08:46Z","modified":"2026-02-04T04:13:20.358327Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:4235-1","title":"Security update for MozillaFirefox, mozilla-nspr and mozilla-nss","description":"This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:\n\nIssues fixed in MozillaFirefox:\n\n- Update to Firefox ESR 60.4 (bsc#1119105)\n- CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11\n- CVE-2018-18492: Fixed a use-after-free with select element\n- CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia\n- CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries\n  to steal cross-origin URLs\n- CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images\n- CVE-2018-12405: Fixed a few memory safety bugs\n\nIssues fixed in mozilla-nss:\n\n- Update to NSS 3.40.1 (bsc#1119105)\n- CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)\n- CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an\n  SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)\n- CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)\n- Fixed a decryption failure during FFDHE key exchange\n- Various security fixes in the ASN.1 code\n\nIssues fixed in mozilla-nspr:\n\n- Update mozilla-nspr to 4.20 (bsc#1119105)\n","status":"published","published":"2018-12-21T17:47:33Z","modified":"2026-02-04T04:35:50.433821Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2018:4236-1","title":"Security update for MozillaFirefox, mozilla-nspr and mozilla-nss","description":"This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:\n\nIssues fixed in MozillaFirefox:\n\n- Update to Firefox ESR 60.4 (bsc#1119105)\n- CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11\n- CVE-2018-18492: Fixed a use-after-free with select element\n- CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia\n- CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries\n  to steal cross-origin URLs\n- CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images\n- CVE-2018-12405: Fixed a few memory safety bugs\n\nIssues fixed in mozilla-nss:\n\n- Update to NSS 3.40.1 (bsc#1119105)\n- CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)\n- CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an\n  SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)\n- CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)\n- Fixed a decryption failure during FFDHE key exchange\n- Various security fixes in the ASN.1 code\n\nIssues fixed in mozilla-nspr:\n\n- Update mozilla-nspr to 4.20 (bsc#1119105)\n","status":"published","published":"2018-12-21T17:49:53Z","modified":"2026-02-04T03:42:47.45532Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2018:4236-2","title":"Security update for MozillaFirefox, mozilla-nspr and mozilla-nss","description":"This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:\n\nIssues fixed in MozillaFirefox:\n\n- Update to Firefox ESR 60.4 (bsc#1119105)\n- CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11\n- CVE-2018-18492: Fixed a use-after-free with select element\n- CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia\n- CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries\n  to steal cross-origin URLs\n- CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images\n- CVE-2018-12405: Fixed a few memory safety bugs\n\nIssues fixed in mozilla-nss:\n\n- Update to NSS 3.40.1 (bsc#1119105)\n- CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)\n- CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an\n  SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)\n- CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)\n- Fixed a decryption failure during FFDHE key exchange\n- Various security fixes in the ASN.1 code\n\nIssues fixed in mozilla-nspr:\n\n- Update mozilla-nspr to 4.20 (bsc#1119105)\n","status":"published","published":"2019-04-15T15:37:00Z","modified":"2026-02-04T03:20:23.659661Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3689-1","title":"libgcrypt11, libgcrypt20 vulnerability","description":"Keegan Ryan discovered that Libgcrypt was susceptible to a side-channel\nattack. A local attacker could possibly use this attack to recover ECDSA\nprivate keys.\n","status":"published","published":"2018-06-19T15:17:55Z","modified":"2026-04-22T09:46:18.868169Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3692-1","title":"openssl, openssl1.0 vulnerabilities","description":"Keegan Ryan discovered that OpenSSL incorrectly handled ECDSA key\ngeneration. An attacker could possibly use this issue to perform a\ncache-timing attack and recover private ECDSA keys. (CVE-2018-0495)\n\nGuido Vranken discovered that OpenSSL incorrectly handled very large prime\nvalues during a key agreement. A remote attacker could possibly use this\nissue to consume resources, leading to a denial of service. (CVE-2018-0732)\n\nAlejandro Cabrera Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis\nManuel Alvarez Tapia discovered that OpenSSL incorrectly handled RSA key\ngeneration. An attacker could possibly use this issue to perform a\ncache-timing attack and recover private RSA keys. (CVE-2018-0737)\n","status":"published","published":"2018-06-26T12:08:09Z","modified":"2026-04-22T09:46:25.272232Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3850-1","title":"nss vulnerabilities","description":"Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation.\nA local attacker could possibly use this issue to perform a cache-timing\nattack and recover private ECDSA keys. (CVE-2018-0495)\n\nIt was discovered that NSS incorrectly handled certain v2-compatible\nClientHello messages. A remote attacker could possibly use this issue to\nperform a replay attack. (CVE-2018-12384)\n\nIt was discovered that NSS incorrectly handled certain padding oracles. A\nremote attacker could possibly use this issue to perform a variant of the\nBleichenbacher attack. (CVE-2018-12404)\n","status":"published","published":"2019-01-09T17:41:27Z","modified":"2026-04-22T09:52:38.331565Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}