{"id":"CVE-2019-1543","aliases":["ALPINE-CVE-2019-1543","BELL-CVE-2019-1543","DEBIAN-CVE-2019-1543","DSA-4475-1","EUVD-2019-10100","GHSA-qpgr-gj53-5m6w","MGASA-2019-0216","MGASA-2019-0354","RHSA-2019:3700","SUSE-SU-2019:0678-1","SUSE-SU-2019:0787-1","UBUNTU-CVE-2019-1543","openSUSE-SU-2019:1147-1","openSUSE-SU-2019:1814-1","openSUSE-SU-2024:11127-1"],"status":"published","title":"ChaCha20-Poly1305 with long nonces","description":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).","severity":{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05701,"percentile":0.93067,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327","CWE-330"],"published":"2019-03-06T21:00:00Z","modified":"2026-11-04T02:30:27Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"file","fixed_in":["5.36-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openssl","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openssl1.1-compat","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openssl1.1-compat","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openssl3","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openssl3","fixed_in":["1.1.1b-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openssl","fixed_in":["1.1.1c-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["1.1.1c-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["1.1.1c-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"openssl","fixed_in":["1.1.0k-1~deb9u1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"openssl-1_1","fixed_in":["1.1.0i-4.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"openssl-1_1","fixed_in":["1.1.1-2.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"openssl-1_1","fixed_in":["1.1.1-2.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"openssl-1_1","fixed_in":["1.1.1-2.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_1","fixed_in":["1.1.1-2.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openssl","fixed_in":["1.1.1-1ubuntu2.1~18.04.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"openssl-1_1","fixed_in":["1.1.0i-lp150.3.22.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openssl1.1-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openssl1.1-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openssl3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openssl3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1b-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1c-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1c-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1c-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0k-1~deb9u1"}]}],"versions":["1.1.0f-3","1.1.0f-3+deb9u1","1.1.0f-3+deb9u2","1.1.0f-4","1.1.0f-5","1.1.0g-1","1.1.0g-2","1.1.0g-2+riscv64","1.1.0h-1","1.1.0h-2","1.1.0h-3","1.1.0h-4","1.1.0j-1~deb9u1"]},{"source":"osv","ecosystem":"Mageia:6","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1.mga6"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:6","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1.mga6"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:6","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1.mga6"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:7","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1.mga7"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:7","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1.mga7"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0l-1.mga7"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:7","package":"compat-openssl10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2t-1.mga7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-2.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-2.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-2.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-2.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-2.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-2.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-2.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-4.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-2.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-2.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-2.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-2.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.2"}]}],"versions":["1.0.2g-1ubuntu13","1.0.2g-1ubuntu14","1.0.2n-1ubuntu1","1.1.0g-2ubuntu1","1.1.0g-2ubuntu2","1.1.0g-2ubuntu3","1.1.0g-2ubuntu4","1.1.0g-2ubuntu4.1","1.1.0g-2ubuntu4.3","1.1.1-1ubuntu2.1~18.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-lp150.3.22.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-lp151.2.6.1"}]}],"bundled":52},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-lp151.2.6.1"}]}],"bundled":52},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-1.2"}]}],"bundled":136}],"products":[{"vendor":"openssl","product":"openssl"}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f426625b6ae9a7831010750490a5f0ad689c5ba3","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://www.openssl.org/news/secadv/20190306.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ee22257b1418438ebaf54df98af4e24f494d1809","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://seclists.org/bugtraq/2019/Jul/3","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://www.debian.org/security/2019/dsa-4475","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","tags":["x_refsource_MISC","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3700","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10365","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1543","tags":["advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ee22257b1418438ebaf54df98af4e24f494d1809"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=f426625b6ae9a7831010750490a5f0ad689c5ba3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z"},{"url":"https://github.com/advisories/GHSA-qpgr-gj53-5m6w"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-1543","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-1543","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-1543","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0216.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25161","tags":["report"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html#AppendixOVIR","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0354.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24888","tags":["report"]},{"url":"https://www.openssl.org/news/secadv/20190910.txt","tags":["web"]},{"url":"https://www.debian.org/security/2019/dsa-4540","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1697915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1706104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1706915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714245","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3700.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-0734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0734","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0734","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-0735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0735","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1543","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190678-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1116833","tags":["report"]},{"url":"https://bugzilla.suse.com/1125494","tags":["report"]},{"url":"https://bugzilla.suse.com/1128189","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1543","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190787-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-1543","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H4WYDW4VVS3XNMH6VCHL3MRMHZO6ZSO2/#H4WYDW4VVS3XNMH6VCHL3MRMHZO6ZSO2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1097248","tags":["report"]},{"url":"https://bugzilla.suse.com/1098050","tags":["report"]},{"url":"https://bugzilla.suse.com/1112097","tags":["report"]},{"url":"https://bugzilla.suse.com/1113894","tags":["report"]},{"url":"https://bugzilla.suse.com/1115041","tags":["report"]},{"url":"https://bugzilla.suse.com/1116050","tags":["report"]},{"url":"https://bugzilla.suse.com/1130503","tags":["report"]},{"url":"https://bugzilla.suse.com/1130588","tags":["report"]},{"url":"https://bugzilla.suse.com/1132379","tags":["report"]},{"url":"https://bugzilla.suse.com/1132439","tags":["report"]},{"url":"https://bugzilla.suse.com/1132827","tags":["report"]},{"url":"https://bugzilla.suse.com/1133289","tags":["report"]},{"url":"https://bugzilla.suse.com/1133492","tags":["report"]},{"url":"https://bugzilla.suse.com/1141801","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2877","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3712","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-1543","title":"ChaCha20-Poly1305 with long nonces","description":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).","status":"published","published":"2019-03-06T21:00:00Z","modified":"2026-11-02T17:46:01.231Z","updated_at":"2026-11-02T19:02:29.283836Z"}],"euvd":[{"id":"EUVD-2019-10100","description":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).","status":"published","published":"2019-03-06T21:00:00Z","modified":"2026-11-02T17:46:01Z","updated_at":"2026-11-03T05:08:39.228431Z"}],"ghsa":[{"id":"GHSA-qpgr-gj53-5m6w","title":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption...","description":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).","status":"published","published":"2022-05-13T01:07:38Z","modified":"2026-11-02T18:32:51Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T19:02:40.409728Z"}],"nvd":[{"id":"CVE-2019-1543","description":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).","status":"published","published":"2019-03-06T21:29:00.247Z","modified":"2026-11-02T18:18:26.603Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-327","CWE-330"],"updated_at":"2026-11-02T20:51:29.040079Z"}],"osv":[{"id":"ALPINE-CVE-2019-1543","description":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).","status":"published","published":"2019-03-06T21:29:00.247Z","modified":"2026-11-03T06:32:29.574976421Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T07:17:41.158523Z"},{"id":"BELL-CVE-2019-1543","title":"CVE-2019-1543 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:44.532219Z","modified":"2026-01-26T09:50:01.289638Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-1543","description":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).","status":"published","published":"2019-03-06T21:29:00.247Z","modified":"2026-11-04T02:30:27.001905942Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-04T02:55:01.518827Z"},{"id":"DEBIAN-CVE-2019-1543","description":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).","status":"published","published":"2019-03-06T21:29:00.247Z","modified":"2026-11-03T09:47:33.663068982Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T10:27:58.933618Z"},{"id":"RHSA-2019:3700","title":"Red Hat Security Advisory: openssl security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:31:45Z","modified":"2026-09-21T10:02:22Z","cvss":[{"version":"3.0","score":5.1,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2019-1543","description":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).","status":"published","published":"2019-03-06T21:29:00Z","modified":"2026-04-22T12:12:19.018769Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"DSA-4475-1","title":"openssl - security update","status":"published","published":"2019-07-01T00:00:00Z","modified":"2026-03-09T02:10:53.767097Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0216","title":"Updated virtualbox packages fix security vulnerabilities","description":"OpenSSL versions 1.1.0 through 1.1.0j and 1.1.1 through 1.1.1b are\nsusceptible to a vulnerability that could lead to disclosure of sensitive\ninformation or the addition or modification of data (CVE-2019-1543).\n\nOracle VM VirtualBox prior to 6.0.10 has an easily exploitable vulnerability\nthat allows low privileged attacker with logon to the infrastructure where\nOracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the\nvulnerability is in Oracle VM VirtualBox, attacks may significantly impact\nadditional products. Successful attacks of this vulnerability can result in\nunauthorized ability to cause a hang or frequently repeatable crash\n(complete DOS) of Oracle VM VirtualBox (CVE-2019-2848).\n\nOracle VM VirtualBox prior to 6.0.10 has an easily exploitable vulnerability\nthat allows low privileged attacker with logon to the infrastructure where\nOracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful\nattacks require human interaction from a person other than the attacker.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a partial denial of service (partial DOS) of Oracle VM VirtualBox\n(CVE-2019-2850).\n\nOracle VM VirtualBox prior to 6.0.10 has an easily exploitable vulnerability\nthat allows low privileged attacker with logon to the infrastructure where\nOracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the\nvulnerability is in Oracle VM VirtualBox, attacks may significantly impact\nadditional products. Successful attacks of this vulnerability can result in\ntakeover of Oracle VM VirtualBox (CVE-2019-2859).\n\nOracle VM VirtualBox prior to 6.0.10 has an easily exploitable vulnerability\nthat allows low privileged attacker with logon to the infrastructure where\nOracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the\nvulnerability is in Oracle VM VirtualBox, attacks may significantly impact\nadditional products. Successful attacks of this vulnerability can result in\nunauthorized access to critical data or complete access to all Oracle VM\nVirtualBox accessible data (CVE-2019-2863).\n\nOracle VM VirtualBox prior to 6.0.10 has a difficult to exploit\nvulnerability allows high privileged attacker with logon to the\ninfrastructure where Oracle VM VirtualBox executes to compromise Oracle\nVM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks\nmay significantly impact additional products. Successful attacks of this\nvulnerability can result in takeover of Oracle VM VirtualBox\n(CVE-2019-2864, CVE-2019-2865).\n\nOracle VM VirtualBox prior to 6.0.10 has an easily exploitable vulnerability\nallows high privileged attacker with logon to the infrastructure where\nOracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the\nvulnerability is in Oracle VM VirtualBox, attacks may significantly impact\nadditional products. Successful attacks of this vulnerability can result in\ntakeover of Oracle VM VirtualBox (CVE-2019-2866, CVE-2019-2867).\n\nOracle VM VirtualBox prior to 6.0.10 has an easily exploitable vulnerability\nthat allows low privileged attacker with logon to the infrastructure where\nOracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\npartial denial of service (partial DOS) of Oracle VM VirtualBox\n(CVE-2019-2873, CVE-2019-2874, CVE-2019-2875, CVE-2019-2876, CVE-2019-2877).\n","status":"published","published":"2019-07-27T16:44:28Z","modified":"2026-04-16T04:42:00.587335095Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"MGASA-2019-0354","title":"Updated openssl packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\n\nChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input\nfor every encryption operation. RFC 7539 specifies that the nonce value\n(IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length\nand front pads the nonce with 0 bytes if it is less than 12 bytes. However\nit also incorrectly allows a nonce to be set of up to 16 bytes. In this\ncase only the last 12 bytes are significant and any additional leading\nbytes are ignored. It is a requirement of using this cipher that nonce\nvalues are unique. Messages encrypted using a reused nonce value are\nsusceptible to serious confidentiality and integrity attacks. If an\napplication changes the default nonce length to be longer than 12 bytes\nand then makes a change to the leading bytes of the nonce expecting the\nnew value to be a new unique nonce then such an application could\ninadvertently encrypt messages with a reused nonce. Additionally the\nignored bytes in a long nonce are not covered by the integrity guarantee\nof this cipher. Any application that relies on the integrity of these\nignored leading bytes of a long nonce may be further affected. Any OpenSSL\ninternal use of this cipher, including in SSL/TLS, is safe because no such\nuse sets such a long nonce value. However user applications that use this\ncipher directly and set a non-default nonce length to be longer than 12\nbytes may be vulnerable. (CVE-2019-1543)\n\nNormally in OpenSSL EC groups always have a co-factor present and this is\nused in side channel resistant code paths. However, in some cases, it is\npossible to construct a group using explicit parameters (instead of using\na named curve). In those cases it is possible that such a group does not\nhave the cofactor present. This can occur even where all the parameters\nmatch a known named curve. If such a curve is used then OpenSSL falls back\nto non-side channel resistant code paths which may result in full key\nrecovery during an ECDSA signature operation. In order to be vulnerable an\nattacker would have to have the ability to time the creation of a large\nnumber of signatures where explicit parameters with no co-factor present\nare in use by an application using libcrypto. For the avoidance of doubt\nlibssl is not vulnerable because explicit parameters are never used.\n(CVE-2019-1547)\n\nIn situations where an attacker receives automated notification of the\nsuccess or failure of a decryption attempt an attacker, after sending a\nvery large number of messages to be decrypted, can recover a CMS/PKCS7\ntransported encryption key or decrypt any RSA encrypted message that was\nencrypted with the public RSA key, using a Bleichenbacher padding oracle\nattack. Applications are not affected if they use a certificate together\nwith the private RSA key to the CMS_decrypt or PKCS7_decrypt functions\nto select the correct recipient info to decrypt. (CVE-2019-1563)\n","status":"published","published":"2019-12-06T14:15:42Z","modified":"2026-04-16T04:40:58.182816193Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:1147-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 (OpenSSL Security Advisory [6 March 2019]) fixes the following issues:\n\nSecurity issue fixed: \t  \n\n- CVE-2019-1543: Fixed an implementation error in ChaCha20-Poly1305 where it was allowed\n  to set IV with more than 12 bytes (bsc#1128189).\n  \nOther issues addressed:   \n\n- Fixed a segfault in openssl speed when an unknown algorithm is passed (bsc#1125494).\n- Correctly skipped binary curves in openssl speed to avoid spitting errors (bsc#1116833).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-04T14:14:06Z","modified":"2026-02-04T02:16:40.054445Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1814-1","title":"Security update for virtualbox","description":"This update for virtualbox to version 6.0.10 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543\n  CVE-2019-2863 CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875\n  CVE-2019-2876 CVE-2019-2850 (boo#1141801)\n","status":"published","published":"2019-07-30T07:38:06Z","modified":"2026-02-04T04:18:12.409785Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11127-1","title":"libopenssl-1_1-devel-1.1.1l-1.2 on GA media","description":"These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:19.520287Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:0678-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 (OpenSSL Security Advisory [6 March 2019]) fixes the following issues:\n\nSecurity issue fixed: \t  \n\n- CVE-2019-1543: Fixed an implementation error in ChaCha20-Poly1305 where it was allowed\n  to set IV with more than 12 bytes (bsc#1128189).\n  \nOther issues addressed:   \n\n- Fixed a segfault in openssl speed when an unknown algorithm is passed (bsc#1125494).\n- Correctly skipped binary curves in openssl speed to avoid spitting errors (bsc#1116833).\n","status":"published","published":"2019-03-21T09:40:36Z","modified":"2026-02-04T03:44:32.63429Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0787-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 (OpenSSL Security Advisory [6 March 2019]) fixes the following issues:\n\t \nSecurity issue fixed: \t  \n\n- CVE-2019-1543: Fixed an implementation error in ChaCha20-Poly1305 where it was allowed\n  to set IV with more than 12 bytes (bsc#1128189). \n","status":"published","published":"2019-03-28T10:22:59Z","modified":"2026-02-04T03:20:54.439343Z","updated_at":"2026-11-02T15:53:45.926331Z"}]}}