{"id":"CVE-2019-1559","aliases":["ALPINE-CVE-2019-1559","BELL-CVE-2019-1559","DEBIAN-CVE-2019-1559","DLA-1701-1","DSA-4400-1","EUVD-2019-10116","GHSA-9ccq-7hvh-cv7p","MGASA-2019-0106","RHSA-2019:2304","RHSA-2019:2437","RHSA-2019:2439","RHSA-2019:2471","RHSA-2019:3929","SUSE-FU-2022:0445-1","SUSE-SU-2019:0572-1","SUSE-SU-2019:0600-1","SUSE-SU-2019:0658-1","SUSE-SU-2019:0803-1","SUSE-SU-2019:0818-1","SUSE-SU-2019:1362-1","SUSE-SU-2019:14091-1","SUSE-SU-2019:14092-1","SUSE-SU-2019:1553-1","SUSE-SU-2019:1608-1","UBUNTU-CVE-2019-1559","USN-3899-1","USN-4376-2","openSUSE-SU-2019:1105-1","openSUSE-SU-2019:1432-1","openSUSE-SU-2024:11126-1"],"status":"published","title":"0-byte record padding oracle","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.17139,"percentile":0.97107,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203"],"published":"2019-02-26T00:00:00Z","modified":"2026-10-24T14:07:08Z","fixes":[{"ecosystem":"Alpine:v3.6","package":"openssl","fixed_in":["1.0.2r-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"openssl","fixed_in":["1.0.2r-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"openssl","fixed_in":["1.0.2r-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openssl","fixed_in":["1.1.0b-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["1.1.0b-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["1.1.0b-2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"openssl","fixed_in":["1.0.1t-1+deb8u11"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"openssl1.0","fixed_in":["1.0.2r-1~deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"openssl","fixed_in":["1.0.2r-1.mga6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-debuginfo","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-devel","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-perl","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-static","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-debuginfo","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-devel","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-perl","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-static","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-debuginfo","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-devel","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-perl","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-static","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-debuginfo","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-devel","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-perl","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-static","fixed_in":["0:1.0.1e-58.el6_10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.14.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"openssl","fixed_in":["1.0.2j-60.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"openssl","fixed_in":["1.0.2j-60.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openssl","fixed_in":["1.0.2j-60.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"openssl","fixed_in":["1.0.2j-60.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"openssl","fixed_in":["1.0.2j-60.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openssl","fixed_in":["1.0.2j-60.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"openssl","fixed_in":["1.0.2j-60.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openssl","fixed_in":["1.0.2j-60.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"openssl","fixed_in":["1.0.2j-60.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"openssl","fixed_in":["1.0.1i-54.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"openssl","fixed_in":["1.0.1i-54.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openssl1","fixed_in":["1.0.1g-0.58.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openssl","fixed_in":["0.9.8j-0.106.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openssl","fixed_in":["0.9.8j-0.106.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"compat-openssl098","fixed_in":["0.9.8j-106.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"compat-openssl098","fixed_in":["0.9.8j-106.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"compat-openssl098","fixed_in":["0.9.8j-106.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"compat-openssl098","fixed_in":["0.9.8j-106.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"compat-openssl098","fixed_in":["0.9.8j-106.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"compat-openssl098","fixed_in":["0.9.8j-106.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"compat-openssl098","fixed_in":["0.9.8j-106.12.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.27+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openssl","fixed_in":["1.0.2g-1ubuntu4.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","fixed_in":["1.0.2n-1ubuntu5.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"openssl-1_0_0","fixed_in":["1.0.2p-lp150.2.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"openssl-1_0_0","fixed_in":["1.0.2p-lp151.5.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"1.0.2r-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"1.0.2r-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"1.0.2r-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0b-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0b-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0b-2"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1t-1+deb8u11"}]}],"versions":["1.0.1k-3","1.0.1k-3+alpha","1.0.1k-3+deb8u1","1.0.1k-3+deb8u2","1.0.1k-3+deb8u3","1.0.1k-3+deb8u4","1.0.1k-3+deb8u5","1.0.1t-1+deb8u1","1.0.1t-1+deb8u10","1.0.1t-1+deb8u2","1.0.1t-1+deb8u3","1.0.1t-1+deb8u4","1.0.1t-1+deb8u5","1.0.1t-1+deb8u6","1.0.1t-1+deb8u7","1.0.1t-1+deb8u8","1.0.1t-1+deb8u9"]},{"source":"osv","ecosystem":"Debian:9","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2r-1~deb9u1"}]}],"versions":["1.0.2l-2","1.0.2l-2+deb9u1","1.0.2l-2+deb9u2","1.0.2l-2+deb9u3","1.0.2m-1","1.0.2m-2","1.0.2m-3","1.0.2n-1","1.0.2n-1+riscv64","1.0.2o-1","1.0.2o-1+riscv64","1.0.2q-1","1.0.2q-1~deb9u1","1.0.2q-2"]},{"source":"osv","ecosystem":"Mageia:6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2r-1.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-20190722.0.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-20190722.0.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-0.1.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovirt-node-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-0.20190717.0.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovirt-node-ng-nodectl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-0.20190717.0.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-0.1.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python2-ovirt-node-ng-nodectl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-0.20190717.0.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-2.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update-placeholder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-2.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rhvm-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3-20190722.0.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-58.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-ecj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1.redhat_1.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-javapackages-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-5.15.11.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-1.Final_redhat_00001.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-1.Final_redhat_00001.2.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-mod_cluster-tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-1.Final_redhat_00001.2.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-python-javapackages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-5.15.11.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-el-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-jsp-2.3-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.21-34.redhat_34.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.21-34.redhat_34.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-servlet-4.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-vault","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_1.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-vault-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_1.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el6","package":"jws5-tomcat-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el6jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-ecj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1.redhat_1.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-javapackages-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-5.15.11.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-1.Final_redhat_00001.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-1.Final_redhat_00001.2.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-mod_cluster-tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-1.Final_redhat_00001.2.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-python-javapackages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-5.15.11.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-el-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-jsp-2.3-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.21-34.redhat_34.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.21-34.redhat_34.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-servlet-4.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-vault","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_1.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-vault-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_1.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el7","package":"jws5-tomcat-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el7jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-ecj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1.redhat_1.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-javapackages-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-5.15.11.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-1.Final_redhat_00001.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-1.Final_redhat_00001.2.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-mod_cluster-tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-1.Final_redhat_00001.2.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-python-javapackages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-5.15.11.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-el-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-jsp-2.3-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.21-34.redhat_34.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.21-34.redhat_34.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-servlet-4.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-vault","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_1.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-vault-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_1.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.2::el8","package":"jws5-tomcat-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.21-10.redhat_4.1.el8jws"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.14.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"nodejs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.1-15.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"nodejs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.1-15.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"nodejs6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.17.0-11.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"nodejs6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.17.0-11.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"nodejs6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.17.0-11.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"nodejs6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.17.0-11.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-54.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-54.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1g-0.58.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-0.106.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-0.106.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-27.34.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.12.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.27+esm1"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.15"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12","1.0.2g-1ubuntu4.13","1.0.2g-1ubuntu4.14"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.3"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5","1.0.2n-1ubuntu5.1","1.0.2n-1ubuntu5.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.15"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12","1.0.2g-1ubuntu4.13","1.0.2g-1ubuntu4.14"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.3"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5","1.0.2n-1ubuntu5.1","1.0.2n-1ubuntu5.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.27+esm1"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-lp150.2.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-lp151.5.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2u-6.2"}]}],"bundled":29}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"f5","product":"big-ip_access_policy_manager"},{"vendor":"f5","product":"big-ip_advanced_firewall_manager"},{"vendor":"f5","product":"big-ip_analytics"},{"vendor":"f5","product":"big-ip_application_acceleration_manager"},{"vendor":"f5","product":"big-ip_application_security_manager"},{"vendor":"f5","product":"big-ip_domain_name_system"},{"vendor":"f5","product":"big-ip_edge_gateway"},{"vendor":"f5","product":"big-ip_fraud_protection_service"},{"vendor":"f5","product":"big-ip_global_traffic_manager"},{"vendor":"f5","product":"big-ip_link_controller"},{"vendor":"f5","product":"big-ip_local_traffic_manager"},{"vendor":"f5","product":"big-ip_policy_enforcement_manager"},{"vendor":"f5","product":"big-ip_webaccelerator"},{"vendor":"f5","product":"big-iq_centralized_management"},{"vendor":"f5","product":"traffix_signaling_delivery_controller"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"mcafee","product":"agent"},{"vendor":"mcafee","product":"data_exchange_layer"},{"vendor":"mcafee","product":"threat_intelligence_exchange_server"},{"vendor":"mcafee","product":"web_gateway"},{"vendor":"netapp","product":"a220_firmware"},{"vendor":"netapp","product":"a320_firmware"},{"vendor":"netapp","product":"a800_firmware"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"altavault"},{"vendor":"netapp","product":"c190_firmware"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"clustered_data_ontap_antivirus_connector"},{"vendor":"netapp","product":"cn1610_firmware"},{"vendor":"netapp","product":"element_software"},{"vendor":"netapp","product":"fas2720_firmware"},{"vendor":"netapp","product":"fas2750_firmware"},{"vendor":"netapp","product":"hci_compute_node"},{"vendor":"netapp","product":"hci_management_node"},{"vendor":"netapp","product":"hyper_converged_infrastructure"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_unified_manager"},{"vendor":"netapp","product":"oncommand_unified_manager_core_package"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"ontap_select_deploy"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"netapp","product":"santricity_smi-s_provider"},{"vendor":"netapp","product":"service_processor"},{"vendor":"netapp","product":"smi-s_provider"},{"vendor":"netapp","product":"snapcenter"},{"vendor":"netapp","product":"snapdrive"},{"vendor":"netapp","product":"snapprotect"},{"vendor":"netapp","product":"solidfire"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"netapp","product":"storage_automation_store"},{"vendor":"netapp","product":"storagegrid"},{"vendor":"nodejs","product":"node.js"},{"vendor":"openssl","product":"openssl"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"api_gateway"},{"vendor":"oracle","product":"business_intelligence"},{"vendor":"oracle","product":"communications_diameter_signaling_router"},{"vendor":"oracle","product":"communications_performance_intelligence_center"},{"vendor":"oracle","product":"communications_session_border_controller"},{"vendor":"oracle","product":"communications_session_router"},{"vendor":"oracle","product":"communications_unified_session_manager"},{"vendor":"oracle","product":"endeca_server"},{"vendor":"oracle","product":"enterprise_manager_base_platform"},{"vendor":"oracle","product":"enterprise_manager_ops_center"},{"vendor":"oracle","product":"jd_edwards_enterpriseone_tools"},{"vendor":"oracle","product":"jd_edwards_world_security"},{"vendor":"oracle","product":"mysql"},{"vendor":"oracle","product":"mysql_enterprise_monitor"},{"vendor":"oracle","product":"mysql_workbench"},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools"},{"vendor":"oracle","product":"secure_global_desktop"},{"vendor":"oracle","product":"services_tools_bundle"},{"vendor":"paloaltonetworks","product":"pan-os"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"jboss_enterprise_web_server"},{"vendor":"redhat","product":"virtualization"},{"vendor":"redhat","product":"virtualization_host"},{"vendor":"tenable","product":"nessus"}],"references":[{"url":"http://www.securityfocus.com/bid/107174","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201903-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3899-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4400","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2304","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2439","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2437","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2471","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3929","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3931","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4376-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Broken Link","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190301-0001/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20190301-0002/","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://www.openssl.org/news/secadv/20190226.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://support.f5.com/csp/article/K18549143","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2019-02","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20190423-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2019-03","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10282","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.f5.com/csp/article/K18549143?utm_source=f5support\u0026amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1559","tags":["advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/"},{"url":"https://support.f5.com/csp/article/K18549143?utm_source=f5support\u0026amp;utm_medium=RSS"},{"url":"https://github.com/advisories/GHSA-9ccq-7hvh-cv7p"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-1559","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-1559","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-1559","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0106.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24434","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683804","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2304.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-0734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0734","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0734","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1559","tags":["advisory","report"]},{"url":"https://github.com/RUB-NDS/TLS-Padding-Oracles","tags":["article","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702223","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727859","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729023","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2437.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16838","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16838","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16838","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16881","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16881","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-0161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0161","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0161","tags":["advisory"]},{"url":"https://edk2-docs.gitbooks.io/security-advisory/content/xhci-stack-local-stack-overflow.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10139","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10160","tags":["advisory"]},{"url":"https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization2.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720255","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2439.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3888","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2471.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/5.2/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1645695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1713275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723708","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3929.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5407","tags":["advisory"]},{"url":"https://github.com/bbbrumley/portsmash","tags":["article"]},{"url":"https://www.openssl.org/news/secadv/20181112.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-0199","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0199","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0199","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-0221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0221","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-0232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701056","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0232","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0232","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10072","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10072","tags":["advisory"]},{"url":"http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.41","tags":["article"]},{"url":"http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.20","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/-2022-445/suse-fu-20220445-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000080","tags":["report"]},{"url":"https://bugzilla.suse.com/1000117","tags":["report"]},{"url":"https://bugzilla.suse.com/1000194","tags":["report"]},{"url":"https://bugzilla.suse.com/1000677","tags":["report"]},{"url":"https://bugzilla.suse.com/1000742","tags":["report"]},{"url":"https://bugzilla.suse.com/1001148","tags":["report"]},{"url":"https://bugzilla.suse.com/1001912","tags":["report"]},{"url":"https://bugzilla.suse.com/1002585","tags":["report"]},{"url":"https://bugzilla.suse.com/1002895","tags":["report"]},{"url":"https://bugzilla.suse.com/1003091","tags":["report"]},{"url":"https://bugzilla.suse.com/1005246","tags":["report"]},{"url":"https://bugzilla.suse.com/1009528","tags":["report"]},{"url":"https://bugzilla.suse.com/1010874","tags":["report"]},{"url":"https://bugzilla.suse.com/1010966","tags":["report"]},{"url":"https://bugzilla.suse.com/1011936","tags":["report"]},{"url":"https://bugzilla.suse.com/1015549","tags":["report"]},{"url":"https://bugzilla.suse.com/1019637","tags":["report"]},{"url":"https://bugzilla.suse.com/1021641","tags":["report"]},{"url":"https://bugzilla.suse.com/1022085","tags":["report"]},{"url":"https://bugzilla.suse.com/1022086","tags":["report"]},{"url":"https://bugzilla.suse.com/1022271","tags":["report"]},{"url":"https://bugzilla.suse.com/1027079","tags":["report"]},{"url":"https://bugzilla.suse.com/1027610","tags":["report"]},{"url":"https://bugzilla.suse.com/1027688","tags":["report"]},{"url":"https://bugzilla.suse.com/1027705","tags":["report"]},{"url":"https://bugzilla.suse.com/1027908","tags":["report"]},{"url":"https://bugzilla.suse.com/1028281","tags":["report"]},{"url":"https://bugzilla.suse.com/1028723","tags":["report"]},{"url":"https://bugzilla.suse.com/1029523","tags":["report"]},{"url":"https://bugzilla.suse.com/1029902","tags":["report"]},{"url":"https://bugzilla.suse.com/1030038","tags":["report"]},{"url":"https://bugzilla.suse.com/1032118","tags":["report"]},{"url":"https://bugzilla.suse.com/1032119","tags":["report"]},{"url":"https://bugzilla.suse.com/1035604","tags":["report"]},{"url":"https://bugzilla.suse.com/1039469","tags":["report"]},{"url":"https://bugzilla.suse.com/1040164","tags":["report"]},{"url":"https://bugzilla.suse.com/1040256","tags":["report"]},{"url":"https://bugzilla.suse.com/1041090","tags":["report"]},{"url":"https://bugzilla.suse.com/1042392","tags":["report"]},{"url":"https://bugzilla.suse.com/1042670","tags":["report"]},{"url":"https://bugzilla.suse.com/1044095","tags":["report"]},{"url":"https://bugzilla.suse.com/1044107","tags":["report"]},{"url":"https://bugzilla.suse.com/1044175","tags":["report"]},{"url":"https://bugzilla.suse.com/1049186","tags":["report"]},{"url":"https://bugzilla.suse.com/1049304","tags":["report"]},{"url":"https://bugzilla.suse.com/1050653","tags":["report"]},{"url":"https://bugzilla.suse.com/1050665","tags":["report"]},{"url":"https://bugzilla.suse.com/1055478","tags":["report"]},{"url":"https://bugzilla.suse.com/1055542","tags":["report"]},{"url":"https://bugzilla.suse.com/1055825","tags":["report"]},{"url":"https://bugzilla.suse.com/1056058","tags":["report"]},{"url":"https://bugzilla.suse.com/1056951","tags":["report"]},{"url":"https://bugzilla.suse.com/1057496","tags":["report"]},{"url":"https://bugzilla.suse.com/1062237","tags":["report"]},{"url":"https://bugzilla.suse.com/1065363","tags":["report"]},{"url":"https://bugzilla.suse.com/1066242","tags":["report"]},{"url":"https://bugzilla.suse.com/1066873","tags":["report"]},{"url":"https://bugzilla.suse.com/1068790","tags":["report"]},{"url":"https://bugzilla.suse.com/1070737","tags":["report"]},{"url":"https://bugzilla.suse.com/1070738","tags":["report"]},{"url":"https://bugzilla.suse.com/1070853","tags":["report"]},{"url":"https://bugzilla.suse.com/1071905","tags":["report"]},{"url":"https://bugzilla.suse.com/1071906","tags":["report"]},{"url":"https://bugzilla.suse.com/1071941","tags":["report"]},{"url":"https://bugzilla.suse.com/1073310","tags":["report"]},{"url":"https://bugzilla.suse.com/1073845","tags":["report"]},{"url":"https://bugzilla.suse.com/1073879","tags":["report"]},{"url":"https://bugzilla.suse.com/1074247","tags":["report"]},{"url":"https://bugzilla.suse.com/1076519","tags":["report"]},{"url":"https://bugzilla.suse.com/1077096","tags":["report"]},{"url":"https://bugzilla.suse.com/1077230","tags":["report"]},{"url":"https://bugzilla.suse.com/1078329","tags":["report"]},{"url":"https://bugzilla.suse.com/1079761","tags":["report"]},{"url":"https://bugzilla.suse.com/1080301","tags":["report"]},{"url":"https://bugzilla.suse.com/1081005","tags":["report"]},{"url":"https://bugzilla.suse.com/1081750","tags":["report"]},{"url":"https://bugzilla.suse.com/1081751","tags":["report"]},{"url":"https://bugzilla.suse.com/1082155","tags":["report"]},{"url":"https://bugzilla.suse.com/1082163","tags":["report"]},{"url":"https://bugzilla.suse.com/1082318","tags":["report"]},{"url":"https://bugzilla.suse.com/1083826","tags":["report"]},{"url":"https://bugzilla.suse.com/1084117","tags":["report"]},{"url":"https://bugzilla.suse.com/1084157","tags":["report"]},{"url":"https://bugzilla.suse.com/1085276","tags":["report"]},{"url":"https://bugzilla.suse.com/1085529","tags":["report"]},{"url":"https://bugzilla.suse.com/1085661","tags":["report"]},{"url":"https://bugzilla.suse.com/1087102","tags":["report"]},{"url":"https://bugzilla.suse.com/1087104","tags":["report"]},{"url":"https://bugzilla.suse.com/1088573","tags":["report"]},{"url":"https://bugzilla.suse.com/1089039","tags":["report"]},{"url":"https://bugzilla.suse.com/1090427","tags":["report"]},{"url":"https://bugzilla.suse.com/1090765","tags":["report"]},{"url":"https://bugzilla.suse.com/1090953","tags":["report"]},{"url":"https://bugzilla.suse.com/1093518","tags":["report"]},{"url":"https://bugzilla.suse.com/1093917","tags":["report"]},{"url":"https://bugzilla.suse.com/1094788","tags":["report"]},{"url":"https://bugzilla.suse.com/1094814","tags":["report"]},{"url":"https://bugzilla.suse.com/1094883","tags":["report"]},{"url":"https://bugzilla.suse.com/1095267","tags":["report"]},{"url":"https://bugzilla.suse.com/1096738","tags":["report"]},{"url":"https://bugzilla.suse.com/1096937","tags":["report"]},{"url":"https://bugzilla.suse.com/1097158","tags":["report"]},{"url":"https://bugzilla.suse.com/1097531","tags":["report"]},{"url":"https://bugzilla.suse.com/1097624","tags":["report"]},{"url":"https://bugzilla.suse.com/1098535","tags":["report"]},{"url":"https://bugzilla.suse.com/1098592","tags":["report"]},{"url":"https://bugzilla.suse.com/1099308","tags":["report"]},{"url":"https://bugzilla.suse.com/1099569","tags":["report"]},{"url":"https://bugzilla.suse.com/1100078","tags":["report"]},{"url":"https://bugzilla.suse.com/1101246","tags":["report"]},{"url":"https://bugzilla.suse.com/1101470","tags":["report"]},{"url":"https://bugzilla.suse.com/1102868","tags":["report"]},{"url":"https://bugzilla.suse.com/1104789","tags":["report"]},{"url":"https://bugzilla.suse.com/1106197","tags":["report"]},{"url":"https://bugzilla.suse.com/1108508","tags":["report"]},{"url":"https://bugzilla.suse.com/1109882","tags":["report"]},{"url":"https://bugzilla.suse.com/1109998","tags":["report"]},{"url":"https://bugzilla.suse.com/1110435","tags":["report"]},{"url":"https://bugzilla.suse.com/1110869","tags":["report"]},{"url":"https://bugzilla.suse.com/1110871","tags":["report"]},{"url":"https://bugzilla.suse.com/1111493","tags":["report"]},{"url":"https://bugzilla.suse.com/1111622","tags":["report"]},{"url":"https://bugzilla.suse.com/1111657","tags":["report"]},{"url":"https://bugzilla.suse.com/1112209","tags":["report"]},{"url":"https://bugzilla.suse.com/1112357","tags":["report"]},{"url":"https://bugzilla.suse.com/1113534","tags":["report"]},{"url":"https://bugzilla.suse.com/1113652","tags":["report"]},{"url":"https://bugzilla.suse.com/1113742","tags":["report"]},{"url":"https://bugzilla.suse.com/1113975","tags":["report"]},{"url":"https://bugzilla.suse.com/1115769","tags":["report"]},{"url":"https://bugzilla.suse.com/1117951","tags":["report"]},{"url":"https://bugzilla.suse.com/1118611","tags":["report"]},{"url":"https://bugzilla.suse.com/1119376","tags":["report"]},{"url":"https://bugzilla.suse.com/1119416","tags":["report"]},{"url":"https://bugzilla.suse.com/1119792","tags":["report"]},{"url":"https://bugzilla.suse.com/1121717","tags":["report"]},{"url":"https://bugzilla.suse.com/1121852","tags":["report"]},{"url":"https://bugzilla.suse.com/1122191","tags":["report"]},{"url":"https://bugzilla.suse.com/1123064","tags":["report"]},{"url":"https://bugzilla.suse.com/1123185","tags":["report"]},{"url":"https://bugzilla.suse.com/1123186","tags":["report"]},{"url":"https://bugzilla.suse.com/1123558","tags":["report"]},{"url":"https://bugzilla.suse.com/1124885","tags":["report"]},{"url":"https://bugzilla.suse.com/1125815","tags":["report"]},{"url":"https://bugzilla.suse.com/1126283","tags":["report"]},{"url":"https://bugzilla.suse.com/1126318","tags":["report"]},{"url":"https://bugzilla.suse.com/1127080","tags":["report"]},{"url":"https://bugzilla.suse.com/1127173","tags":["report"]},{"url":"https://bugzilla.suse.com/1128146","tags":["report"]},{"url":"https://bugzilla.suse.com/1128323","tags":["report"]},{"url":"https://bugzilla.suse.com/1128355","tags":["report"]},{"url":"https://bugzilla.suse.com/1129071","tags":["report"]},{"url":"https://bugzilla.suse.com/1129566","tags":["report"]},{"url":"https://bugzilla.suse.com/1130840","tags":["report"]},{"url":"https://bugzilla.suse.com/1131291","tags":["report"]},{"url":"https://bugzilla.suse.com/1132174","tags":["report"]},{"url":"https://bugzilla.suse.com/1132323","tags":["report"]},{"url":"https://bugzilla.suse.com/1132455","tags":["report"]},{"url":"https://bugzilla.suse.com/1132663","tags":["report"]},{"url":"https://bugzilla.suse.com/1132900","tags":["report"]},{"url":"https://bugzilla.suse.com/1135009","tags":["report"]},{"url":"https://bugzilla.suse.com/1136444","tags":["report"]},{"url":"https://bugzilla.suse.com/1138666","tags":["report"]},{"url":"https://bugzilla.suse.com/1138715","tags":["report"]},{"url":"https://bugzilla.suse.com/1138746","tags":["report"]},{"url":"https://bugzilla.suse.com/1139915","tags":["report"]},{"url":"https://bugzilla.suse.com/1140255","tags":["report"]},{"url":"https://bugzilla.suse.com/1141168","tags":["report"]},{"url":"https://bugzilla.suse.com/1142899","tags":["report"]},{"url":"https://bugzilla.suse.com/1143033","tags":["report"]},{"url":"https://bugzilla.suse.com/1143454","tags":["report"]},{"url":"https://bugzilla.suse.com/1143893","tags":["report"]},{"url":"https://bugzilla.suse.com/1144506","tags":["report"]},{"url":"https://bugzilla.suse.com/1149686","tags":["report"]},{"url":"https://bugzilla.suse.com/1149792","tags":["report"]},{"url":"https://bugzilla.suse.com/1150003","tags":["report"]},{"url":"https://bugzilla.suse.com/1150190","tags":["report"]},{"url":"https://bugzilla.suse.com/1150250","tags":["report"]},{"url":"https://bugzilla.suse.com/1150895","tags":["report"]},{"url":"https://bugzilla.suse.com/1153830","tags":["report"]},{"url":"https://bugzilla.suse.com/1155815","tags":["report"]},{"url":"https://bugzilla.suse.com/1156677","tags":["report"]},{"url":"https://bugzilla.suse.com/1156694","tags":["report"]},{"url":"https://bugzilla.suse.com/1156908","tags":["report"]},{"url":"https://bugzilla.suse.com/1157104","tags":["report"]},{"url":"https://bugzilla.suse.com/1157354","tags":["report"]},{"url":"https://bugzilla.suse.com/1158809","tags":["report"]},{"url":"https://bugzilla.suse.com/1159235","tags":["report"]},{"url":"https://bugzilla.suse.com/1159538","tags":["report"]},{"url":"https://bugzilla.suse.com/1160163","tags":["report"]},{"url":"https://bugzilla.suse.com/1161557","tags":["report"]},{"url":"https://bugzilla.suse.com/1161770","tags":["report"]},{"url":"https://bugzilla.suse.com/1162224","tags":["report"]},{"url":"https://bugzilla.suse.com/1162367","tags":["report"]},{"url":"https://bugzilla.suse.com/1162743","tags":["report"]},{"url":"https://bugzilla.suse.com/1163978","tags":["report"]},{"url":"https://bugzilla.suse.com/1164310","tags":["report"]},{"url":"https://bugzilla.suse.com/1165439","tags":["report"]},{"url":"https://bugzilla.suse.com/1165578","tags":["report"]},{"url":"https://bugzilla.suse.com/1165730","tags":["report"]},{"url":"https://bugzilla.suse.com/1165823","tags":["report"]},{"url":"https://bugzilla.suse.com/1165960","tags":["report"]},{"url":"https://bugzilla.suse.com/1166139","tags":["report"]},{"url":"https://bugzilla.suse.com/1166758","tags":["report"]},{"url":"https://bugzilla.suse.com/1167008","tags":["report"]},{"url":"https://bugzilla.suse.com/1167501","tags":["report"]},{"url":"https://bugzilla.suse.com/1167732","tags":["report"]},{"url":"https://bugzilla.suse.com/1167746","tags":["report"]},{"url":"https://bugzilla.suse.com/1168480","tags":["report"]},{"url":"https://bugzilla.suse.com/1168973","tags":["report"]},{"url":"https://bugzilla.suse.com/1169489","tags":["report"]},{"url":"https://bugzilla.suse.com/1170175","tags":["report"]},{"url":"https://bugzilla.suse.com/1170863","tags":["report"]},{"url":"https://bugzilla.suse.com/1171368","tags":["report"]},{"url":"https://bugzilla.suse.com/1171561","tags":["report"]},{"url":"https://bugzilla.suse.com/1172226","tags":["report"]},{"url":"https://bugzilla.suse.com/1172908","tags":["report"]},{"url":"https://bugzilla.suse.com/1172928","tags":["report"]},{"url":"https://bugzilla.suse.com/1173226","tags":["report"]},{"url":"https://bugzilla.suse.com/1173356","tags":["report"]},{"url":"https://bugzilla.suse.com/1174009","tags":["report"]},{"url":"https://bugzilla.suse.com/1174091","tags":["report"]},{"url":"https://bugzilla.suse.com/1174514","tags":["report"]},{"url":"https://bugzilla.suse.com/1175729","tags":["report"]},{"url":"https://bugzilla.suse.com/1176116","tags":["report"]},{"url":"https://bugzilla.suse.com/1176129","tags":["report"]},{"url":"https://bugzilla.suse.com/1176134","tags":["report"]},{"url":"https://bugzilla.suse.com/1176232","tags":["report"]},{"url":"https://bugzilla.suse.com/1176256","tags":["report"]},{"url":"https://bugzilla.suse.com/1176257","tags":["report"]},{"url":"https://bugzilla.suse.com/1176258","tags":["report"]},{"url":"https://bugzilla.suse.com/1176259","tags":["report"]},{"url":"https://bugzilla.suse.com/1176262","tags":["report"]},{"url":"https://bugzilla.suse.com/1176389","tags":["report"]},{"url":"https://bugzilla.suse.com/1176785","tags":["report"]},{"url":"https://bugzilla.suse.com/1176977","tags":["report"]},{"url":"https://bugzilla.suse.com/1177120","tags":["report"]},{"url":"https://bugzilla.suse.com/1177127","tags":["report"]},{"url":"https://bugzilla.suse.com/1177559","tags":["report"]},{"url":"https://bugzilla.suse.com/1178168","tags":["report"]},{"url":"https://bugzilla.suse.com/1178341","tags":["report"]},{"url":"https://bugzilla.suse.com/1178670","tags":["report"]},{"url":"https://bugzilla.suse.com/1179491","tags":["report"]},{"url":"https://bugzilla.suse.com/1179562","tags":["report"]},{"url":"https://bugzilla.suse.com/1179630","tags":["report"]},{"url":"https://bugzilla.suse.com/1179805","tags":["report"]},{"url":"https://bugzilla.suse.com/1180125","tags":["report"]},{"url":"https://bugzilla.suse.com/1180781","tags":["report"]},{"url":"https://bugzilla.suse.com/1181126","tags":["report"]},{"url":"https://bugzilla.suse.com/1181324","tags":["report"]},{"url":"https://bugzilla.suse.com/1181944","tags":["report"]},{"url":"https://bugzilla.suse.com/1182066","tags":["report"]},{"url":"https://bugzilla.suse.com/1182211","tags":["report"]},{"url":"https://bugzilla.suse.com/1182244","tags":["report"]},{"url":"https://bugzilla.suse.com/1182264","tags":["report"]},{"url":"https://bugzilla.suse.com/1182331","tags":["report"]},{"url":"https://bugzilla.suse.com/1182333","tags":["report"]},{"url":"https://bugzilla.suse.com/1182379","tags":["report"]},{"url":"https://bugzilla.suse.com/1182963","tags":["report"]},{"url":"https://bugzilla.suse.com/1183059","tags":["report"]},{"url":"https://bugzilla.suse.com/1183374","tags":["report"]},{"url":"https://bugzilla.suse.com/1183858","tags":["report"]},{"url":"https://bugzilla.suse.com/1184505","tags":["report"]},{"url":"https://bugzilla.suse.com/1185588","tags":["report"]},{"url":"https://bugzilla.suse.com/1185706","tags":["report"]},{"url":"https://bugzilla.suse.com/1185748","tags":["report"]},{"url":"https://bugzilla.suse.com/1186738","tags":["report"]},{"url":"https://bugzilla.suse.com/1187045","tags":["report"]},{"url":"https://bugzilla.suse.com/1189521","tags":["report"]},{"url":"https://bugzilla.suse.com/1190781","tags":["report"]},{"url":"https://bugzilla.suse.com/1193357","tags":["report"]},{"url":"https://bugzilla.suse.com/356549","tags":["report"]},{"url":"https://bugzilla.suse.com/381844","tags":["report"]},{"url":"https://bugzilla.suse.com/394317","tags":["report"]},{"url":"https://bugzilla.suse.com/408865","tags":["report"]},{"url":"https://bugzilla.suse.com/428177","tags":["report"]},{"url":"https://bugzilla.suse.com/430141","tags":["report"]},{"url":"https://bugzilla.suse.com/431945","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/442740","tags":["report"]},{"url":"https://bugzilla.suse.com/459468","tags":["report"]},{"url":"https://bugzilla.suse.com/489641","tags":["report"]},{"url":"https://bugzilla.suse.com/504687","tags":["report"]},{"url":"https://bugzilla.suse.com/509031","tags":["report"]},{"url":"https://bugzilla.suse.com/526319","tags":["report"]},{"url":"https://bugzilla.suse.com/590833","tags":["report"]},{"url":"https://bugzilla.suse.com/610223","tags":["report"]},{"url":"https://bugzilla.suse.com/610642","tags":["report"]},{"url":"https://bugzilla.suse.com/629905","tags":["report"]},{"url":"https://bugzilla.suse.com/637176","tags":["report"]},{"url":"https://bugzilla.suse.com/651003","tags":["report"]},{"url":"https://bugzilla.suse.com/657698","tags":["report"]},{"url":"https://bugzilla.suse.com/658604","tags":["report"]},{"url":"https://bugzilla.suse.com/670526","tags":["report"]},{"url":"https://bugzilla.suse.com/673071","tags":["report"]},{"url":"https://bugzilla.suse.com/693027","tags":["report"]},{"url":"https://bugzilla.suse.com/715423","tags":["report"]},{"url":"https://bugzilla.suse.com/720601","tags":["report"]},{"url":"https://bugzilla.suse.com/743787","tags":["report"]},{"url":"https://bugzilla.suse.com/747125","tags":["report"]},{"url":"https://bugzilla.suse.com/748738","tags":["report"]},{"url":"https://bugzilla.suse.com/749210","tags":["report"]},{"url":"https://bugzilla.suse.com/749213","tags":["report"]},{"url":"https://bugzilla.suse.com/749735","tags":["report"]},{"url":"https://bugzilla.suse.com/750618","tags":["report"]},{"url":"https://bugzilla.suse.com/751718","tags":["report"]},{"url":"https://bugzilla.suse.com/751946","tags":["report"]},{"url":"https://bugzilla.suse.com/751977","tags":["report"]},{"url":"https://bugzilla.suse.com/754447","tags":["report"]},{"url":"https://bugzilla.suse.com/754677","tags":["report"]},{"url":"https://bugzilla.suse.com/761500","tags":["report"]},{"url":"https://bugzilla.suse.com/774710","tags":["report"]},{"url":"https://bugzilla.suse.com/784670","tags":["report"]},{"url":"https://bugzilla.suse.com/784994","tags":["report"]},{"url":"https://bugzilla.suse.com/787526","tags":["report"]},{"url":"https://bugzilla.suse.com/793420","tags":["report"]},{"url":"https://bugzilla.suse.com/799119","tags":["report"]},{"url":"https://bugzilla.suse.com/802184","tags":["report"]},{"url":"https://bugzilla.suse.com/803004","tags":["report"]},{"url":"https://bugzilla.suse.com/809831","tags":["report"]},{"url":"https://bugzilla.suse.com/811890","tags":["report"]},{"url":"https://bugzilla.suse.com/822642","tags":["report"]},{"url":"https://bugzilla.suse.com/825221","tags":["report"]},{"url":"https://bugzilla.suse.com/828513","tags":["report"]},{"url":"https://bugzilla.suse.com/831629","tags":["report"]},{"url":"https://bugzilla.suse.com/832833","tags":["report"]},{"url":"https://bugzilla.suse.com/834601","tags":["report"]},{"url":"https://bugzilla.suse.com/835687","tags":["report"]},{"url":"https://bugzilla.suse.com/839107","tags":["report"]},{"url":"https://bugzilla.suse.com/84331","tags":["report"]},{"url":"https://bugzilla.suse.com/849377","tags":["report"]},{"url":"https://bugzilla.suse.com/855666","tags":["report"]},{"url":"https://bugzilla.suse.com/855676","tags":["report"]},{"url":"https://bugzilla.suse.com/856687","tags":["report"]},{"url":"https://bugzilla.suse.com/857203","tags":["report"]},{"url":"https://bugzilla.suse.com/857850","tags":["report"]},{"url":"https://bugzilla.suse.com/858239","tags":["report"]},{"url":"https://bugzilla.suse.com/867887","tags":["report"]},{"url":"https://bugzilla.suse.com/869945","tags":["report"]},{"url":"https://bugzilla.suse.com/871152","tags":["report"]},{"url":"https://bugzilla.suse.com/872299","tags":["report"]},{"url":"https://bugzilla.suse.com/873351","tags":["report"]},{"url":"https://bugzilla.suse.com/876282","tags":["report"]},{"url":"https://bugzilla.suse.com/876710","tags":["report"]},{"url":"https://bugzilla.suse.com/876712","tags":["report"]},{"url":"https://bugzilla.suse.com/876748","tags":["report"]},{"url":"https://bugzilla.suse.com/880891","tags":["report"]},{"url":"https://bugzilla.suse.com/885662","tags":["report"]},{"url":"https://bugzilla.suse.com/885882","tags":["report"]},{"url":"https://bugzilla.suse.com/889013","tags":["report"]},{"url":"https://bugzilla.suse.com/889363","tags":["report"]},{"url":"https://bugzilla.suse.com/892477","tags":["report"]},{"url":"https://bugzilla.suse.com/892480","tags":["report"]},{"url":"https://bugzilla.suse.com/895129","tags":["report"]},{"url":"https://bugzilla.suse.com/898917","tags":["report"]},{"url":"https://bugzilla.suse.com/901223","tags":["report"]},{"url":"https://bugzilla.suse.com/901277","tags":["report"]},{"url":"https://bugzilla.suse.com/901902","tags":["report"]},{"url":"https://bugzilla.suse.com/902364","tags":["report"]},{"url":"https://bugzilla.suse.com/906878","tags":["report"]},{"url":"https://bugzilla.suse.com/907584","tags":["report"]},{"url":"https://bugzilla.suse.com/908362","tags":["report"]},{"url":"https://bugzilla.suse.com/908372","tags":["report"]},{"url":"https://bugzilla.suse.com/912014","tags":["report"]},{"url":"https://bugzilla.suse.com/912015","tags":["report"]},{"url":"https://bugzilla.suse.com/912018","tags":["report"]},{"url":"https://bugzilla.suse.com/912292","tags":["report"]},{"url":"https://bugzilla.suse.com/912293","tags":["report"]},{"url":"https://bugzilla.suse.com/912294","tags":["report"]},{"url":"https://bugzilla.suse.com/912296","tags":["report"]},{"url":"https://bugzilla.suse.com/912460","tags":["report"]},{"url":"https://bugzilla.suse.com/913229","tags":["report"]},{"url":"https://bugzilla.suse.com/915479","tags":["report"]},{"url":"https://bugzilla.suse.com/917607","tags":["report"]},{"url":"https://bugzilla.suse.com/917759","tags":["report"]},{"url":"https://bugzilla.suse.com/917815","tags":["report"]},{"url":"https://bugzilla.suse.com/919648","tags":["report"]},{"url":"https://bugzilla.suse.com/920236","tags":["report"]},{"url":"https://bugzilla.suse.com/922448","tags":["report"]},{"url":"https://bugzilla.suse.com/922488","tags":["report"]},{"url":"https://bugzilla.suse.com/922496","tags":["report"]},{"url":"https://bugzilla.suse.com/922499","tags":["report"]},{"url":"https://bugzilla.suse.com/922500","tags":["report"]},{"url":"https://bugzilla.suse.com/926597","tags":["report"]},{"url":"https://bugzilla.suse.com/929678","tags":["report"]},{"url":"https://bugzilla.suse.com/929736","tags":["report"]},{"url":"https://bugzilla.suse.com/930189","tags":["report"]},{"url":"https://bugzilla.suse.com/931698","tags":["report"]},{"url":"https://bugzilla.suse.com/931978","tags":["report"]},{"url":"https://bugzilla.suse.com/933898","tags":["report"]},{"url":"https://bugzilla.suse.com/933911","tags":["report"]},{"url":"https://bugzilla.suse.com/934487","tags":["report"]},{"url":"https://bugzilla.suse.com/934489","tags":["report"]},{"url":"https://bugzilla.suse.com/934491","tags":["report"]},{"url":"https://bugzilla.suse.com/934493","tags":["report"]},{"url":"https://bugzilla.suse.com/935856","tags":["report"]},{"url":"https://bugzilla.suse.com/937085","tags":["report"]},{"url":"https://bugzilla.suse.com/937212","tags":["report"]},{"url":"https://bugzilla.suse.com/937492","tags":["report"]},{"url":"https://bugzilla.suse.com/937634","tags":["report"]},{"url":"https://bugzilla.suse.com/937912","tags":["report"]},{"url":"https://bugzilla.suse.com/939456","tags":["report"]},{"url":"https://bugzilla.suse.com/940608","tags":["report"]},{"url":"https://bugzilla.suse.com/942385","tags":["report"]},{"url":"https://bugzilla.suse.com/942751","tags":["report"]},{"url":"https://bugzilla.suse.com/943421","tags":["report"]},{"url":"https://bugzilla.suse.com/944204","tags":["report"]},{"url":"https://bugzilla.suse.com/945455","tags":["report"]},{"url":"https://bugzilla.suse.com/946648","tags":["report"]},{"url":"https://bugzilla.suse.com/947104","tags":["report"]},{"url":"https://bugzilla.suse.com/947357","tags":["report"]},{"url":"https://bugzilla.suse.com/947679","tags":["report"]},{"url":"https://bugzilla.suse.com/948198","tags":["report"]},{"url":"https://bugzilla.suse.com/952871","tags":["report"]},{"url":"https://bugzilla.suse.com/954256","tags":["report"]},{"url":"https://bugzilla.suse.com/954486","tags":["report"]},{"url":"https://bugzilla.suse.com/954690","tags":["report"]},{"url":"https://bugzilla.suse.com/957812","tags":["report"]},{"url":"https://bugzilla.suse.com/957813","tags":["report"]},{"url":"https://bugzilla.suse.com/957815","tags":["report"]},{"url":"https://bugzilla.suse.com/958501","tags":["report"]},{"url":"https://bugzilla.suse.com/961334","tags":["report"]},{"url":"https://bugzilla.suse.com/962291","tags":["report"]},{"url":"https://bugzilla.suse.com/963415","tags":["report"]},{"url":"https://bugzilla.suse.com/963974","tags":["report"]},{"url":"https://bugzilla.suse.com/964204","tags":["report"]},{"url":"https://bugzilla.suse.com/964472","tags":["report"]},{"url":"https://bugzilla.suse.com/964474","tags":["report"]},{"url":"https://bugzilla.suse.com/965830","tags":["report"]},{"url":"https://bugzilla.suse.com/967128","tags":["report"]},{"url":"https://bugzilla.suse.com/968046","tags":["report"]},{"url":"https://bugzilla.suse.com/968047","tags":["report"]},{"url":"https://bugzilla.suse.com/968048","tags":["report"]},{"url":"https://bugzilla.suse.com/968050","tags":["report"]},{"url":"https://bugzilla.suse.com/968265","tags":["report"]},{"url":"https://bugzilla.suse.com/968270","tags":["report"]},{"url":"https://bugzilla.suse.com/968374","tags":["report"]},{"url":"https://bugzilla.suse.com/968601","tags":["report"]},{"url":"https://bugzilla.suse.com/975875","tags":["report"]},{"url":"https://bugzilla.suse.com/976942","tags":["report"]},{"url":"https://bugzilla.suse.com/977584","tags":["report"]},{"url":"https://bugzilla.suse.com/977614","tags":["report"]},{"url":"https://bugzilla.suse.com/977615","tags":["report"]},{"url":"https://bugzilla.suse.com/977616","tags":["report"]},{"url":"https://bugzilla.suse.com/977663","tags":["report"]},{"url":"https://bugzilla.suse.com/978224","tags":["report"]},{"url":"https://bugzilla.suse.com/981848","tags":["report"]},{"url":"https://bugzilla.suse.com/982268","tags":["report"]},{"url":"https://bugzilla.suse.com/982575","tags":["report"]},{"url":"https://bugzilla.suse.com/983249","tags":["report"]},{"url":"https://bugzilla.suse.com/984323","tags":["report"]},{"url":"https://bugzilla.suse.com/985054","tags":["report"]},{"url":"https://bugzilla.suse.com/988086","tags":["report"]},{"url":"https://bugzilla.suse.com/990207","tags":["report"]},{"url":"https://bugzilla.suse.com/990392","tags":["report"]},{"url":"https://bugzilla.suse.com/990419","tags":["report"]},{"url":"https://bugzilla.suse.com/990428","tags":["report"]},{"url":"https://bugzilla.suse.com/991193","tags":["report"]},{"url":"https://bugzilla.suse.com/991877","tags":["report"]},{"url":"https://bugzilla.suse.com/992120","tags":["report"]},{"url":"https://bugzilla.suse.com/992988","tags":["report"]},{"url":"https://bugzilla.suse.com/992989","tags":["report"]},{"url":"https://bugzilla.suse.com/992992","tags":["report"]},{"url":"https://bugzilla.suse.com/993130","tags":["report"]},{"url":"https://bugzilla.suse.com/993819","tags":["report"]},{"url":"https://bugzilla.suse.com/993825","tags":["report"]},{"url":"https://bugzilla.suse.com/993968","tags":["report"]},{"url":"https://bugzilla.suse.com/994749","tags":["report"]},{"url":"https://bugzilla.suse.com/994844","tags":["report"]},{"url":"https://bugzilla.suse.com/994910","tags":["report"]},{"url":"https://bugzilla.suse.com/995075","tags":["report"]},{"url":"https://bugzilla.suse.com/995324","tags":["report"]},{"url":"https://bugzilla.suse.com/995359","tags":["report"]},{"url":"https://bugzilla.suse.com/995377","tags":["report"]},{"url":"https://bugzilla.suse.com/995959","tags":["report"]},{"url":"https://bugzilla.suse.com/996255","tags":["report"]},{"url":"https://bugzilla.suse.com/997043","tags":["report"]},{"url":"https://bugzilla.suse.com/997614","tags":["report"]},{"url":"https://bugzilla.suse.com/998190","tags":["report"]},{"url":"https://bugzilla.suse.com/999665","tags":["report"]},{"url":"https://bugzilla.suse.com/999666","tags":["report"]},{"url":"https://bugzilla.suse.com/999668","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190572-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190600-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190658-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1127532","tags":["report"]},{"url":"https://bugzilla.suse.com/1127533","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5739","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190803-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190818-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191362-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914091-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914092-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191553-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1110018","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8610","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191608-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-1559","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3899-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4376-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-1547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-1563","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BABYTFKK6BZ5GQXJED77GCUO2MDMDYO3/#BABYTFKK6BZ5GQXJED77GCUO2MDMDYO3","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJYXWE62KKD5ASTWGRAR5B66BQCUHX6D/#PJYXWE62KKD5ASTWGRAR5B66BQCUHX6D","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7056","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-1559","title":"0-byte record padding oracle","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","status":"published","published":"2019-02-27T23:00:00Z","modified":"2024-09-17T04:20:35.057Z","updated_at":"2026-11-02T14:20:25.661187Z"}],"euvd":[{"id":"EUVD-2019-10116","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","status":"published","published":"2019-02-27T23:00:00Z","modified":"2024-09-17T04:20:35Z","updated_at":"2026-11-03T00:28:23.906788Z"}],"ghsa":[{"id":"GHSA-9ccq-7hvh-cv7p","title":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to...","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","status":"published","published":"2022-05-13T01:03:06Z","modified":"2023-02-01T05:02:34Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:49:56.778846Z"}],"nvd":[{"id":"CVE-2019-1559","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","status":"published","published":"2019-02-27T23:29:00.277Z","modified":"2026-06-17T02:28:44.967Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:05:07.268578Z"}],"osv":[{"id":"ALPINE-CVE-2019-1559","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","status":"published","published":"2019-02-27T23:29:00.277Z","modified":"2026-09-21T06:17:52.49263201Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2019-1559","title":"CVE-2019-1559 does not affect BellSoft software","status":"withdrawn","published":"2019-02-27T23:29:00Z","modified":"2026-01-26T09:48:48.568674Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-1559","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","status":"published","published":"2019-02-27T23:29:00.277Z","modified":"2026-10-24T14:07:08.057261015Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:11.361782Z"},{"id":"DEBIAN-CVE-2019-1559","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","status":"published","published":"2019-02-27T23:29:00.277Z","modified":"2026-09-21T07:02:46.331021508Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2019:2304","title":"Red Hat Security Advisory: openssl security and bug fix update","status":"published","published":"2024-09-13T16:56:33Z","modified":"2026-09-21T10:02:12Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2437","title":"Red Hat Security Advisory: Red Hat Virtualization security update","status":"published","published":"2024-09-13T19:53:41Z","modified":"2026-10-08T10:01:37Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2439","title":"Red Hat Security Advisory: rhvm-appliance security, bug fix, and enhancement update","status":"published","published":"2024-09-22T16:36:05Z","modified":"2026-08-09T10:01:50Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2471","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-13T16:12:05Z","modified":"2026-08-09T10:01:51Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3929","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 5.2 security release","status":"published","published":"2024-09-16T02:40:14Z","modified":"2026-09-21T10:02:24Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2019-1559","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","status":"published","published":"2019-02-26T00:00:00Z","modified":"2026-04-22T12:11:29.058719Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"DLA-1701-1","title":"openssl - security update","status":"published","published":"2019-03-01T00:00:00Z","modified":"2026-03-09T01:20:55.601617Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4400-1","title":"openssl1.0 - security update","status":"published","published":"2019-02-28T00:00:00Z","modified":"2026-03-09T02:09:01.625254Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0106","title":"Updated openssl packages fix security vulnerability","description":"If an application encounters a fatal protocol error and then calls\nSSL_shutdown() twice (once to send a close_notify, and once to receive one)\nthen OpenSSL can respond differently to the calling application if a 0 byte\nrecord is received with invalid padding compared to if a 0 byte record is\nreceived with an invalid MAC. If the application then behaves differently\nbased on that in a way that is detectable to the remote peer, then this\namounts to a padding oracle that could be used to decrypt data\n(CVE-2019-1559).\n","status":"published","published":"2019-03-07T16:34:45Z","modified":"2026-04-16T04:43:51.025866892Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1105-1","title":"Security update for openssl-1_0_0","description":"This update for openssl-1_0_0 fixes the following issues:\n\nSecurity issues fixed: \n\n- The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951)\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances\n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-02T10:59:55Z","modified":"2026-02-04T02:39:51.168089Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1432-1","title":"Security update for openssl-1_0_0","description":"This update for openssl-1_0_0 fixes the following issues:\n\nSecurity issues fixed: \n\n- The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951)\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances\n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-05-21T16:26:12Z","modified":"2026-02-04T02:34:49.139213Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11126-1","title":"libopenssl-1_0_0-devel-1.0.2u-6.2 on GA media","description":"These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-6.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:25:20.676767Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-FU-2022:0445-1","title":"Feature update for venv-salt-minion","description":"This feature update for venv-salt-minion provides the following changes:\n\n- Introduce `venv-salt-minion`.\n- Mention fixed issues provided with the bundle.\n  ","status":"published","published":"2022-02-16T15:23:18Z","modified":"2026-02-04T02:38:14.687149Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2019:0572-1","title":"Security update for openssl-1_0_0","description":"This update for openssl-1_0_0 fixes the following issues:\n\nSecurity issues fixed: \n\n- The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951)\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances\n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n","status":"published","published":"2019-03-08T08:24:27Z","modified":"2026-02-04T02:38:46.687321Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0600-1","title":"Security update for openssl-1_0_0","description":"This update for openssl-1_0_0 fixes the following issues:\n\nSecurity issues fixed: \n\n- The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951)\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances\n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n","status":"published","published":"2019-03-12T17:40:27Z","modified":"2026-02-04T02:49:41.846539Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0658-1","title":"Security update for nodejs4","description":"This update for nodejs4 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service \n  when HTTP connection are kept active (bsc#1127533).\n- CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service\n  when HTTP connection are kept active (bsc#1127532).\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances \n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\t  \n","status":"published","published":"2019-03-20T13:32:01Z","modified":"2026-02-04T04:09:01.031708Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0803-1","title":"Security update for openssl","description":"This update for openssl fixes the following issues:\n\nSecurity issues fixed: \n\n- The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951)\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances\n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n\nOther issues addressed: \n\n- Fixed IV handling in SHAEXT paths: aes/asm/aesni-sha*-x86_64.pl (bsc#1113975).\n- Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078).\n","status":"published","published":"2019-03-29T12:14:45Z","modified":"2026-02-04T04:40:49.328939Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0818-1","title":"Security update for nodejs6","description":"This update for nodejs6 to version 6.17.0 fixes the following issues:\n\nSecurity issues fixed:\n\n\n- CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service \n  when HTTP connection are kept active (bsc#1127533).\n- CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service\n  when HTTP connection are kept active (bsc#1127532).\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances \n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n\nRelease Notes: https://nodejs.org/en/blog/release/v6.17.0/    \n","status":"published","published":"2019-03-29T17:03:45Z","modified":"2026-02-04T03:23:42.211174Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1362-1","title":"Security update for openssl","description":"This update for openssl fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-1559: Fixed a 0-byte record padding oracle via SSL_shutdown (bsc#1127080).\n","status":"published","published":"2019-05-28T08:50:04Z","modified":"2026-02-04T03:59:18.885278Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:14091-1","title":"Security update for openssl1","description":"This update for openssl1 fixes the following security issues:\n\n- CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)\n- Reject invalid EC point coordinates (bsc#1131291)\n- Fixed 'The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations' (bsc#1117951)\n","status":"published","published":"2019-06-18T16:28:44Z","modified":"2026-02-04T04:15:14.784219Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:14092-1","title":"Security update for openssl","description":"This update for openssl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)\n- Reject invalid EC point coordinates (bsc#1131291)\n- Mitigate the 'The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations' attack (bsc#1117951)\n","status":"published","published":"2019-09-11T14:45:26Z","modified":"2026-02-04T03:00:23.811469Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1553-1","title":"Security update for openssl","description":"\n  \nThis update for openssl fixes the following issues:\n\n- CVE-2018-0732: Reject excessively large primes in DH key generation (bsc#1097158)\n- CVE-2018-0734: Timing vulnerability in DSA signature generation (bsc#1113652)\n- CVE-2018-0737: Cache timing vulnerability in RSA Key Generation (bsc#1089039)\n- CVE-2018-5407: Elliptic curve scalar multiplication timing attack defenses (fixes 'PortSmash') (bsc#1113534)\n- CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)\n- Fix One\u0026Done side-channel attack on RSA (bsc#1104789)\n- Reject invalid EC point coordinates (bsc#1131291)\n- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951)\n- Add missing error string to CVE-2016-8610 fix (bsc#1110018#c9)\n- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)\n\nNon security fixes:\n\n- correct the error detection in the fips patch (bsc#1106197)\n- Add openssl(cli) Provide so the packages that require the openssl\n  binary can require this instead of the new openssl meta package\n  (bsc#1101470)\n\n","status":"published","published":"2019-06-18T16:29:26Z","modified":"2026-02-04T02:19:27.950526Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1608-1","title":"Security update for compat-openssl098","description":"This update for compat-openssl098 fixes the following issues:\n\n- CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)\n- Reject invalid EC point coordinates (bsc#1131291)\n- Fixed 'The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations' (bsc#1117951)\n","status":"published","published":"2019-06-21T08:27:17Z","modified":"2026-02-04T03:03:20.768802Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-3899-1","title":"openssl, openssl1.0 vulnerability","description":"Juraj Somorovsky, Robert Merget, and Nimrod Aviram discovered that certain\napplications incorrectly used OpenSSL and could be exposed to a padding\noracle attack. A remote attacker could possibly use this issue to decrypt\ndata.\n","status":"published","published":"2019-02-27T17:23:00Z","modified":"2026-04-22T09:54:16.767998Z","updated_at":"2026-11-02T16:58:14.019824Z"},{"id":"USN-4376-2","title":"openssl vulnerabilities","description":"USN-4376-1 fixed several vulnerabilities in OpenSSL. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Cesar Pereida García, Sohaib ul Hassan, Nicola Tuveri, Iaroslav Gridin,\n Alejandro Cabrera Aldaya, and Billy Brumley discovered that OpenSSL\n incorrectly handled ECDSA signatures. An attacker could possibly use this\n issue to perform a timing side-channel attack and recover private ECDSA\n keys. (CVE-2019-1547)\n\n Juraj Somorovsky, Robert Merget, and Nimrod Aviram discovered that certain\n applications incorrectly used OpenSSL and could be exposed to a padding\n oracle attack. A remote attacker could possibly use this issue to decrypt\n data. (CVE-2019-1559)\n\n Bernd Edlinger discovered that OpenSSL incorrectly handled certain\n decryption functions. In certain scenarios, a remote attacker could\n possibly use this issue to perform a padding oracle attack and decrypt\n traffic. (CVE-2019-1563)\n","status":"published","published":"2020-07-09T17:41:10Z","modified":"2026-04-27T19:02:30.076187041Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}