{"id":"CVE-2022-0778","aliases":["ALPINE-CVE-2022-0778","ALSA-2022:1065","ALSA-2022:5326","AZL-9051","BELL-CVE-2022-0778","BIT-mariadb-2022-0778","BIT-mariadb-min-2022-0778","BIT-mysql-client-2022-0778","BIT-node-2022-0778","BIT-node-min-2022-0778","CLSA-2022-1647550273","CLSA-2022-1647550569","CLSA-2022-1647550603","CLSA-2022-1647550812","CLSA-2022-1647550873","DEBIAN-CVE-2022-0778","DLA-2952-1","DLA-2953-1","DSA-5103-1","EUVD-2022-1575","GHSA-x3mh-jvjw-3xwx","JLSEC-2026-227","MGASA-2022-0113","OESA-2022-1603","OESA-2022-1898","OESA-2022-1924","OESA-2022-1938","OESA-2023-1830","OESA-2024-2092","OESA-2024-2093","OESA-2024-2094","OESA-2024-2095","RHSA-2022:1065","RHSA-2022:1066","RHSA-2022:1071","RHSA-2022:1073","RHSA-2022:1076","RHSA-2022:1077","RHSA-2022:1078","RHSA-2022:1082","RHSA-2022:1091","RHSA-2022:1112","RHSA-2022:1263","RHSA-2022:1389","RHSA-2022:1519","RHSA-2022:4896","RHSA-2022:4899","RHSA-2022:5326","RLSA-2022:1065","RLSA-2022:4899","RLSA-2022:5326","RUSTSEC-2022-0014","SUSE-RU-2022:0861-1","SUSE-SU-2022:0851-1","SUSE-SU-2022:0853-1","SUSE-SU-2022:0854-1","SUSE-SU-2022:0856-1","SUSE-SU-2022:0857-1","SUSE-SU-2022:0859-1","SUSE-SU-2022:0860-1","SUSE-SU-2022:0861-1","SUSE-SU-2022:0935-1","SUSE-SU-2022:1459-1","SUSE-SU-2022:1461-1","SUSE-SU-2022:1462-1","SUSE-SU-2022:14915-1","SUSE-SU-2022:14916-1","SUSE-SU-2022:1536-1","UBUNTU-CVE-2022-0778","USN-5328-1","USN-5328-2","USN-6457-1","USN-7894-1","openSUSE-SU-2022:0856-1","openSUSE-SU-2024:11927-1","openSUSE-SU-2024:11933-1","openSUSE-SU-2024:11944-1","openSUSE-SU-2024:11953-1","openSUSE-SU-2024:12444-1","openSUSE-SU-2025:14965-1"],"status":"published","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.73188,"percentile":0.99461,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-835"],"published":"2022-03-15T00:00:00Z","modified":"2026-11-03T08:00:56Z","exploits":[{"source":"pocgithub","id":"drago-96/CVE-2022-0778","title":"drago-96/CVE-2022-0778","date":"2022-03-15","url":"https://github.com/drago-96/CVE-2022-0778"},{"source":"pocgithub","id":"yywing/cve-2022-0778","title":"yywing/cve-2022-0778","date":"2022-04-04","url":"https://github.com/yywing/cve-2022-0778"},{"source":"pocgithub","id":"jkakavas/CVE-2022-0778-POC","title":"jkakavas/CVE-2022-0778-POC","date":"2022-04-18","url":"https://github.com/jkakavas/CVE-2022-0778-POC"},{"source":"pocgithub","id":"0xUhaw/CVE-2022-0778","title":"0xUhaw/CVE-2022-0778","date":"2022-04-21","url":"https://github.com/0xUhaw/CVE-2022-0778"},{"source":"pocgithub","id":"Trinadh465/openssl-1.1.1g_CVE-2022-0778","title":"Trinadh465/openssl-1.1.1g_CVE-2022-0778","date":"2023-09-11","url":"https://github.com/Trinadh465/openssl-1.1.1g_CVE-2022-0778"},{"source":"pocgithub","id":"jeongjunsoo/CVE-2022-0778","title":"jeongjunsoo/CVE-2022-0778","date":"2023-10-26","url":"https://github.com/jeongjunsoo/CVE-2022-0778"},{"source":"pocgithub","id":"federiconbaez/cortex9-openssl-bn-mod-sqrt-loop-model","title":"federiconbaez/cortex9-openssl-bn-mod-sqrt-loop-model","date":"2026-11-06","url":"https://github.com/federiconbaez/cortex9-openssl-bn-mod-sqrt-loop-model"}],"fixes":[{"ecosystem":"crates.io","package":"openssl-src","fixed_in":["300.0.5","111.18.0"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.14","package":"libressl","fixed_in":["3.3.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libressl","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libretls","fixed_in":["3.3.3p1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libretls","fixed_in":["3.3.4-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libretls","fixed_in":["3.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libretls","fixed_in":["3.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libretls","fixed_in":["3.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libretls","fixed_in":["3.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libretls","fixed_in":["3.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libretls","fixed_in":["3.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libretls","fixed_in":["3.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libretls","fixed_in":["3.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libretls","fixed_in":["3.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"lighthouse","fixed_in":["2.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"lighthouse","fixed_in":["2.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"lighthouse","fixed_in":["2.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"lighthouse","fixed_in":["2.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"lighthouse","fixed_in":["2.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"lighthouse","fixed_in":["2.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk11","fixed_in":["11.0.15_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openssl","fixed_in":["1.1.1n-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openssl","fixed_in":["1.1.1n-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openssl","fixed_in":["1.1.1n-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openssl","fixed_in":["1.1.1n-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openssl","fixed_in":["1.1.1n-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openssl","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openssl","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openssl","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openssl","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openssl","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openssl","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openssl","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openssl","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openssl1.1-compat","fixed_in":["1.1.1n-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openssl1.1-compat","fixed_in":["1.1.1n-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openssl3","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openssl3","fixed_in":["3.0.2-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openssl","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openssl-devel","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openssl-libs","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openssl-perl","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"compat-openssl10","fixed_in":["1:1.0.2o-4.el8_6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openssl","fixed_in":["1.1.1k-12"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb","fixed_in":["10.2.42","10.3.33","10.4.23","10.5.14","10.6.6","10.7.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb-min","fixed_in":["10.2.42","10.3.33","10.4.23","10.5.14","10.6.6","10.7.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mysql-client","fixed_in":["10.2.42","10.3.33","10.4.23","10.5.14","10.6.6","10.7.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"node","fixed_in":["12.12.1","12.22.11","14.14.1","14.19.1","16.12.1","16.14.2","17.7.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"node-min","fixed_in":["12.12.1","12.22.11","14.14.1","14.19.1","16.12.1","16.14.2","17.7.2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openssl","fixed_in":["1.0.1e-63.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openssl-devel","fixed_in":["1.0.1e-63.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openssl-perl","fixed_in":["1.0.1e-63.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openssl-static","fixed_in":["1.0.1e-63.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openssl","fixed_in":["1.0.1e-63.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openssl-devel","fixed_in":["1.0.1e-63.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openssl-perl","fixed_in":["1.0.1e-63.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openssl-static","fixed_in":["1.0.1e-63.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libssl-dev","fixed_in":["1.0.2g-1ubuntu4.21+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libssl-doc","fixed_in":["1.0.2g-1ubuntu4.21+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libssl1.0.0","fixed_in":["1.0.2g-1ubuntu4.21+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"openssl","fixed_in":["1.0.2g-1ubuntu4.21+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl-devel","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl-libs","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl-perl","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl-static","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl-devel","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl-libs","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl-perl","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl-static","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openssl","fixed_in":["1.1.1n-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["1.1.1n-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["1.1.1n-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"openssl1.0","fixed_in":["1.0.2u-1~deb9u7"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenSSL_jll","fixed_in":["1.1.14+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"Openresty_jll","fixed_in":["1.21.4+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"libnode_jll","fixed_in":["16.17.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"openssl","fixed_in":["1.1.1n-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openssl","fixed_in":["1.1.1f-15.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"openssl","fixed_in":["1.1.1f-15.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"openssl","fixed_in":["1.1.1f-15.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"linux-sgx","fixed_in":["2.11.100-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"linux-sgx","fixed_in":["2.11.100-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"linux-sgx","fixed_in":["2.15.1-5.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-debuginfo","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-debugsource","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-devel","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-libs","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-libs-debuginfo","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-perl","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-libs","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-devel","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-perl","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-static","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-devel","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-perl","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-static","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-devel","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-libs","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-perl","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-static","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-devel","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-libs","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-perl","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-static","fixed_in":["1:1.0.2k-25.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl","fixed_in":["1:1.1.1g-16.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-debuginfo","fixed_in":["1:1.1.1g-16.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-debugsource","fixed_in":["1:1.1.1g-16.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-devel","fixed_in":["1:1.1.1g-16.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-libs","fixed_in":["1:1.1.1g-16.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-libs-debuginfo","fixed_in":["1:1.1.1g-16.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-perl","fixed_in":["1:1.1.1g-16.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"openssl","fixed_in":["0:1.0.1e-60.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"openssl-debuginfo","fixed_in":["0:1.0.1e-60.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"openssl-devel","fixed_in":["0:1.0.1e-60.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"openssl-perl","fixed_in":["0:1.0.1e-60.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"openssl-static","fixed_in":["0:1.0.1e-60.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl","fixed_in":["1:1.0.2k-10.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-10.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-devel","fixed_in":["1:1.0.2k-10.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-libs","fixed_in":["1:1.0.2k-10.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-perl","fixed_in":["1:1.0.2k-10.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-static","fixed_in":["1:1.0.2k-10.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-devel","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-libs","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-devel","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-libs","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-devel","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-libs","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-perl","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-static","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-perl","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-static","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-perl","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-static","fixed_in":["1:1.0.2k-21.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-devel","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-libs","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-devel","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-libs","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-debuginfo","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-devel","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-libs","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-perl","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-static","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-perl","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-static","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-perl","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-static","fixed_in":["1:1.0.2k-18.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl","fixed_in":["1:1.0.1e-62.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-debuginfo","fixed_in":["1:1.0.1e-62.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-devel","fixed_in":["1:1.0.1e-62.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-libs","fixed_in":["1:1.0.1e-62.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-perl","fixed_in":["1:1.0.1e-62.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-static","fixed_in":["1:1.0.1e-62.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl","fixed_in":["1:1.1.1c-19.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-debuginfo","fixed_in":["1:1.1.1c-19.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-debugsource","fixed_in":["1:1.1.1c-19.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-devel","fixed_in":["1:1.1.1c-19.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-libs","fixed_in":["1:1.1.1c-19.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-libs-debuginfo","fixed_in":["1:1.1.1c-19.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-perl","fixed_in":["1:1.1.1c-19.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl","fixed_in":["1:1.1.1c-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-debuginfo","fixed_in":["1:1.1.1c-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-debugsource","fixed_in":["1:1.1.1c-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-devel","fixed_in":["1:1.1.1c-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-libs","fixed_in":["1:1.1.1c-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-libs-debuginfo","fixed_in":["1:1.1.1c-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-perl","fixed_in":["1:1.1.1c-5.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-admin-webapps","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-docs-webapp","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-el-3.0-api","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-java-jdk11","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-java-jdk8","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-javadoc","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-jsp-2.3-api","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-lib","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-native","fixed_in":["0:1.2.30-4.redhat_4.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-native-debuginfo","fixed_in":["0:1.2.30-4.redhat_4.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-selinux","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-servlet-4.0-api","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-webapps","fixed_in":["0:9.0.50-5.redhat_00007.1.el7jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-admin-webapps","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-docs-webapp","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-el-3.0-api","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-javadoc","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-jsp-2.3-api","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-lib","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-native","fixed_in":["0:1.2.30-4.redhat_4.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-native-debuginfo","fixed_in":["0:1.2.30-4.redhat_4.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-selinux","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-servlet-4.0-api","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-webapps","fixed_in":["0:9.0.50-5.redhat_00007.1.el8jws"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"compat-openssl11","fixed_in":["1:1.1.1k-4.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"compat-openssl11-debuginfo","fixed_in":["1:1.1.1k-4.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"compat-openssl11-debugsource","fixed_in":["1:1.1.1k-4.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-openssl10","fixed_in":["1:1.0.2o-4.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-openssl10-debuginfo","fixed_in":["1:1.0.2o-4.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-openssl10-debugsource","fixed_in":["1:1.0.2o-4.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"openssl","fixed_in":["1:1.1.1k-6.el8_5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"compat-openssl11","fixed_in":["1:1.1.1k-4.el9_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"compat-openssl10","fixed_in":["1:1.0.2o-4.el8_6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"glibc","fixed_in":["2.31-150300.20.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libxcrypt","fixed_in":["4.4.15-150300.4.2.41"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"glibc","fixed_in":["2.31-150300.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"libxcrypt","fixed_in":["4.4.15-150300.4.2.41"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"glibc","fixed_in":["2.31-150300.20.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxcrypt","fixed_in":["4.4.15-150300.4.2.41"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"linux-glibc-devel","fixed_in":["5.3-3.2.10"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openssl-1_1","fixed_in":["1.1.0i-4.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openssl-1_1","fixed_in":["1.1.0i-4.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openssl-1_1","fixed_in":["1.1.0i-4.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openssl-1_1","fixed_in":["1.1.0i-4.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openssl-1_1","fixed_in":["1.1.0i-14.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openssl-1_1","fixed_in":["1.1.0i-14.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openssl-1_1","fixed_in":["1.1.0i-14.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openssl-1_1","fixed_in":["1.1.0i-14.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openssl-1_1","fixed_in":["1.1.0i-14.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"openssl-1_1","fixed_in":["1.1.0i-14.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openssl","fixed_in":["1.0.2j-60.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"openssl","fixed_in":["1.0.2j-60.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openssl","fixed_in":["1.0.2j-60.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openssl","fixed_in":["1.0.2j-60.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openssl","fixed_in":["1.0.2j-60.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openssl","fixed_in":["1.0.2j-60.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openssl","fixed_in":["1.0.2j-60.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"compat-openssl098","fixed_in":["0.9.8j-106.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"compat-openssl098","fixed_in":["0.9.8j-106.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"compat-openssl098","fixed_in":["0.9.8j-106.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"compat-openssl098","fixed_in":["0.9.8j-106.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"openssl-1_1","fixed_in":["1.1.1d-2.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openssl-1_1","fixed_in":["1.1.1d-2.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_1","fixed_in":["1.1.1d-2.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openssl-1_1","fixed_in":["1.1.1d-2.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openssl-1_1","fixed_in":["1.1.1d-2.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssl-1_1","fixed_in":["1.1.1d-2.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssl-1_1","fixed_in":["1.1.1d-2.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"glibc","fixed_in":["2.31-150300.20.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxcrypt","fixed_in":["4.4.15-150300.4.2.41"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openssl-1_1","fixed_in":["1.1.1d-11.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zlib","fixed_in":["1.2.11-3.26.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"nodejs12","fixed_in":["12.22.11-1.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openssl","fixed_in":["0.9.8j-0.106.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openssl","fixed_in":["0.9.8j-0.106.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openssl1","fixed_in":["1.0.1g-0.58.42.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.27+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssl","fixed_in":["1.0.2g-1ubuntu4.20+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssl","fixed_in":["1.0.2g-1ubuntu4.fips.4.20.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openssl","fixed_in":["1.1.1-1ubuntu2.1~18.04.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","fixed_in":["1.0.2n-1ubuntu5.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"openssl","fixed_in":["1.1.1-1ubuntu2.fips.2.1~18.04.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openssl","fixed_in":["1.1.1f-1ubuntu2.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssl","fixed_in":["1.1.1f-1ubuntu2.fips.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"edk2","fixed_in":["2022.02-3ubuntu0.22.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nodejs","fixed_in":["12.22.9~dfsg-1ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openssl","fixed_in":["3.0.2-0ubuntu1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.49.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openssl-3","fixed_in":["3.0.2-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_1","fixed_in":["1.1.1n-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libressl","fixed_in":["3.4.3-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cargo-audit-advisory-db","fixed_in":["20220323-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-ecdsa","fixed_in":["0.18.0-1.1","0.19.1-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"openssl-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"300.0.0"},{"fixed":"300.0.5"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"openssl-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"111.18.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3p1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.4-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libretls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"lighthouse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"lighthouse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"lighthouse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"lighthouse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"lighthouse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"lighthouse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.15_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"1.1.1n-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"1.1.1n-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"1.1.1n-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"1.1.1n-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"1.1.1n-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openssl1.1-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openssl1.1-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openssl3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openssl3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"compat-openssl10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2o-4.el8_6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1k-12"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb","ranges":[{"type":"SEMVER","events":[{"introduced":"10.2.0"},{"fixed":"10.2.42"},{"introduced":"10.3.0"},{"fixed":"10.3.33"},{"introduced":"10.4.0"},{"fixed":"10.4.23"},{"introduced":"10.5.0"},{"fixed":"10.5.14"},{"introduced":"10.6.0"},{"fixed":"10.6.6"},{"introduced":"10.7.0"},{"fixed":"10.7.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb-min","ranges":[{"type":"SEMVER","events":[{"introduced":"10.2.0"},{"fixed":"10.2.42"},{"introduced":"10.3.0"},{"fixed":"10.3.33"},{"introduced":"10.4.0"},{"fixed":"10.4.23"},{"introduced":"10.5.0"},{"fixed":"10.5.14"},{"introduced":"10.6.0"},{"fixed":"10.6.6"},{"introduced":"10.7.0"},{"fixed":"10.7.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mysql-client","ranges":[{"type":"SEMVER","events":[{"introduced":"10.2.0"},{"fixed":"10.2.42"},{"introduced":"10.3.0"},{"fixed":"10.3.33"},{"introduced":"10.4.0"},{"fixed":"10.4.23"},{"introduced":"10.5.0"},{"fixed":"10.5.14"},{"introduced":"10.6.0"},{"fixed":"10.6.6"},{"introduced":"10.7.0"},{"fixed":"10.7.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"node","ranges":[{"type":"SEMVER","events":[{"introduced":"12.0.0"},{"fixed":"12.12.1"},{"introduced":"12.13.0"},{"fixed":"12.22.11"},{"introduced":"14.0.0"},{"fixed":"14.14.1"},{"introduced":"14.15.0"},{"fixed":"14.19.1"},{"introduced":"16.0.0"},{"fixed":"16.12.1"},{"introduced":"16.13.0"},{"fixed":"16.14.2"},{"introduced":"17.0.0"},{"fixed":"17.7.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"node-min","ranges":[{"type":"SEMVER","events":[{"introduced":"12.0.0"},{"fixed":"12.12.1"},{"introduced":"12.13.0"},{"fixed":"12.22.11"},{"introduced":"14.0.0"},{"fixed":"14.14.1"},{"introduced":"14.15.0"},{"fixed":"14.19.1"},{"introduced":"16.0.0"},{"fixed":"16.12.1"},{"introduced":"16.13.0"},{"fixed":"16.14.2"},{"introduced":"17.0.0"},{"fixed":"17.7.2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.21+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssl-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.21+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssl1.0.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.21+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.21+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0l-1~deb9u5"}]}],"versions":["1.1.0f-3","1.1.0f-3+deb9u1","1.1.0f-3+deb9u2","1.1.0f-4","1.1.0f-5","1.1.0g-1","1.1.0g-2","1.1.0g-2+riscv64","1.1.0h-1","1.1.0h-2","1.1.0h-3","1.1.0h-4","1.1.0j-1~deb9u1","1.1.0k-1~deb9u1","1.1.0l-1~deb9u1","1.1.0l-1~deb9u2","1.1.0l-1~deb9u3","1.1.0l-1~deb9u4"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2u-1~deb9u7"}]}],"versions":["1.0.2l-2","1.0.2l-2+deb9u1","1.0.2l-2+deb9u2","1.0.2l-2+deb9u3","1.0.2m-1","1.0.2m-2","1.0.2m-3","1.0.2n-1","1.0.2n-1+riscv64","1.0.2o-1","1.0.2o-1+riscv64","1.0.2q-1","1.0.2q-1~deb9u1","1.0.2q-2","1.0.2r-1~deb9u1","1.0.2s-1~deb9u1","1.0.2t-1~deb9u1","1.0.2u-1~deb9u1","1.0.2u-1~deb9u2","1.0.2u-1~deb9u3","1.0.2u-1~deb9u4","1.0.2u-1~deb9u5","1.0.2u-1~deb9u6"]},{"source":"osv","ecosystem":"Debian:10","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-0+deb10u8"}]}],"versions":["1.1.1c-1","1.1.1d-0+deb10u1","1.1.1d-0+deb10u2","1.1.1d-0+deb10u3","1.1.1d-0+deb10u4","1.1.1d-0+deb10u5","1.1.1d-0+deb10u6","1.1.1d-0+deb10u7"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1k-1+deb11u2"}]}],"versions":["1.1.1k-1","1.1.1k-1+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"crates.io","package":"openssl-src","ranges":[{"type":"SEMVER","events":[{"introduced":"300.0.0"},{"fixed":"300.0.5"}]}]},{"source":"osv","ecosystem":"crates.io","package":"openssl-src","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"111.18.0"}]}]},{"source":"osv","ecosystem":"Julia","package":"OpenSSL_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.14+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"Openresty_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.21.4+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"libnode_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"16.17.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-15.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-15.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-15.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"intel-sgx-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-4.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"intel-sgx-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-4.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"intel-sgx-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-2.oe2203"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"linux-sgx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.100-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"linux-sgx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.100-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"linux-sgx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-5.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15-23.oe1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15-24.oe1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4-5.oe2203"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.39-1.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.39-1.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.5.22-1.oe2203sp2"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.5.22-1.oe2203sp1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.5.22-1.oe2203sp2"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-20.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-20.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202002-24.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-20.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-25.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-16.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-16.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-16.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-16.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-16.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-16.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-16.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-60.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-60.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-60.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-60.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-60.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-10.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-10.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-10.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-10.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-10.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-10.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-21.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-18.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-62.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-62.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-62.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-62.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-62.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-62.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-19.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-19.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-19.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-19.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-19.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-19.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-19.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-5.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.22-20220330.1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.22-20220330.1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-3.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-3.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-3.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-3.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-10.Final_redhat_2.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-10.Final_redhat_2.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-22.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-22.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-29.redhat_1.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-29.redhat_1.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-29.redhat_1.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-29.redhat_1.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-41.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-41.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-68.GA.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-68.GA.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-80.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-41.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-41.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-41.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-chil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-11.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-chil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-11.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-26.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-pkcs11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-26.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.jbcs.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-sqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-91.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-3.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-3.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-3.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-3.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-3.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-10.Final_redhat_2.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-10.Final_redhat_2.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-22.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-22.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-29.redhat_1.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-29.redhat_1.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-29.redhat_1.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-29.redhat_1.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-41.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-41.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-68.GA.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-68.GA.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-80.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-41.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-41.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-nghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-41.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-chil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-11.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-chil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-11.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-26.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-pkcs11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-26.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-11.el8jbcs"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-el-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-jsp-2.3-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.30-4.redhat_4.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.30-4.redhat_4.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-servlet-4.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el7","package":"jws5-tomcat-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el7jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-el-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-jsp-2.3-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.30-4.redhat_4.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.30-4.redhat_4.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-servlet-4.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.6::el8","package":"jws5-tomcat-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.50-5.redhat_00007.1.el8jws"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202205291010_8.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202205291010_8.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"compat-openssl11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-4.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"compat-openssl11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-4.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"compat-openssl11-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-4.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-openssl10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2o-4.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-openssl10-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2o-4.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-openssl10-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2o-4.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-6.el8_5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"compat-openssl11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-4.el9_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"compat-openssl10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2o-4.el8_6"}]}]},{"source":"osv","ecosystem":"crates.io","package":"openssl-src","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"111.18.0"},{"introduced":"300.0.0"},{"fixed":"300.0.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-150300.20.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libxcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.15-150300.4.2.41"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-150300.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"libxcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.15-150300.4.2.41"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-150300.20.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.15-150300.4.2.41"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"linux-glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-3.2.10"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-4.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-4.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-4.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-4.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-14.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-14.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-14.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-14.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-14.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-14.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-150300.20.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.15-150300.4.2.41"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-11.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.26.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.11-1.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-6.28.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP3","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"nodejs12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.12-150200.4.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP3","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.19.1-150200.15.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-0.106.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-0.106.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1g-0.58.42.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.27+esm5"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27","1.0.1f-1ubuntu2.27+esm1","1.0.1f-1ubuntu2.27+esm2","1.0.1f-1ubuntu2.27+esm3","1.0.1f-1ubuntu2.27+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.20+esm2"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12","1.0.2g-1ubuntu4.13","1.0.2g-1ubuntu4.14","1.0.2g-1ubuntu4.15","1.0.2g-1ubuntu4.16","1.0.2g-1ubuntu4.17","1.0.2g-1ubuntu4.18","1.0.2g-1ubuntu4.19","1.0.2g-1ubuntu4.20","1.0.2g-1ubuntu4.20+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.fips.4.20.2"}]}],"versions":["1.0.2g-1ubuntu4.fips.4.9.1","1.0.2g-1ubuntu4.fips.4.13.1","1.0.2g-1ubuntu4.fips.4.15.1","1.0.2g-1ubuntu4.fips.4.16.1","1.0.2g-1ubuntu4.fips.4.17.1","1.0.2g-1ubuntu4.fips.4.18.1","1.0.2g-1ubuntu4.fips.4.19.3","1.0.2g-1ubuntu4.fips.4.20.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2g-1ubuntu4.fips.4.6~ppa1","1.0.2g-1ubuntu4.fips.4.6~ppa2","1.0.2g-1ubuntu4.fips.4.6~ppa3","1.0.2g-1ubuntu4.fips.4.6","1.0.2g-1ubuntu4.fips.4.6.1","1.0.2g-1ubuntu4.fips.4.6.2","1.0.2g-1ubuntu4.fips.4.6.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.15"}]}],"versions":["1.0.2g-1ubuntu13","1.0.2g-1ubuntu14","1.0.2n-1ubuntu1","1.1.0g-2ubuntu1","1.1.0g-2ubuntu2","1.1.0g-2ubuntu3","1.1.0g-2ubuntu4","1.1.0g-2ubuntu4.1","1.1.0g-2ubuntu4.3","1.1.1-1ubuntu2.1~18.04.1","1.1.1-1ubuntu2.1~18.04.2","1.1.1-1ubuntu2.1~18.04.3","1.1.1-1ubuntu2.1~18.04.4","1.1.1-1ubuntu2.1~18.04.5","1.1.1-1ubuntu2.1~18.04.6","1.1.1-1ubuntu2.1~18.04.7","1.1.1-1ubuntu2.1~18.04.8","1.1.1-1ubuntu2.1~18.04.9","1.1.1-1ubuntu2.1~18.04.10","1.1.1-1ubuntu2.1~18.04.13","1.1.1-1ubuntu2.1~18.04.14"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.8"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5","1.0.2n-1ubuntu5.1","1.0.2n-1ubuntu5.2","1.0.2n-1ubuntu5.3","1.0.2n-1ubuntu5.4","1.0.2n-1ubuntu5.5","1.0.2n-1ubuntu5.6","1.0.2n-1ubuntu5.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20170911.5dfba97c-1","0~20171010.234dbcef-1","0~20171027.76fd5a66-1","0~20171205.a9212288-1","0~20180105.0bc94c74-1","0~20180205.c0d9813c-1","0~20180205.c0d9813c-2","0~20180205.c0d9813c-2ubuntu0.1","0~20180205.c0d9813c-2ubuntu0.2","0~20180205.c0d9813c-2ubuntu0.3","0~20180205.c0d9813c-2ubuntu0.3+esm1","0~20180205.c0d9813c-2ubuntu0.3+esm2","0~20180205.c0d9813c-2ubuntu0.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.fips.2.1~18.04.15"}]}],"versions":["1.1.1-1ubuntu2.fips.2.1~18.04.5.1","1.1.1-1ubuntu2.fips.2.1~18.04.6.1","1.1.1-1ubuntu2.fips.2.1~18.04.7.1","1.1.1-1ubuntu2.fips.2.1~18.04.9.1","1.1.1-1ubuntu2.fips.2.1~18.04.9.2","1.1.1-1ubuntu2.fips.2.1~18.04.9.3","1.1.1-1ubuntu2.fips.2.1~18.04.13.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-1ubuntu2.fips.2.1~18.04.3.1","1.1.1-1ubuntu2.fips.2.1~18.04.15.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.12"}]}],"versions":["1.1.1c-1ubuntu4","1.1.1d-2ubuntu3","1.1.1d-2ubuntu6","1.1.1f-1ubuntu1","1.1.1f-1ubuntu2","1.1.1f-1ubuntu2.1","1.1.1f-1ubuntu2.2","1.1.1f-1ubuntu2.3","1.1.1f-1ubuntu2.4","1.1.1f-1ubuntu2.5","1.1.1f-1ubuntu2.8","1.1.1f-1ubuntu2.9","1.1.1f-1ubuntu2.10","1.1.1f-1ubuntu2.11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20190606.20d2e5a1-2ubuntu1","0~20190828.37eef910-3","0~20190828.37eef910-4","0~20191122.bd85bf54-1","0~20191122.bd85bf54-1ubuntu1","0~20191122.bd85bf54-2","0~20191122.bd85bf54-2ubuntu1","0~20191122.bd85bf54-2ubuntu2","0~20191122.bd85bf54-2ubuntu3","0~20191122.bd85bf54-2ubuntu3.1","0~20191122.bd85bf54-2ubuntu3.2","0~20191122.bd85bf54-2ubuntu3.3","0~20191122.bd85bf54-2ubuntu3.4","0~20191122.bd85bf54-2ubuntu3.5","0~20191122.bd85bf54-2ubuntu3.6","0~20191122.bd85bf54-2ubuntu3.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.fips.12"}]}],"versions":["1.1.1f-1ubuntu2.fips.7","1.1.1f-1ubuntu2.fips.7.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1f-1ubuntu2.fips.2.8","1.1.1f-1ubuntu2.fips.7.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.4"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1","2022.02-3ubuntu0.22.04.2","2022.02-3ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.9~dfsg-1ubuntu3.1"}]}],"versions":["12.22.5~dfsg-5ubuntu1","12.22.7~dfsg-2ubuntu1","12.22.7~dfsg-2ubuntu3","12.22.9~dfsg-1ubuntu2","12.22.9~dfsg-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-0ubuntu1"}]}],"versions":["1.1.1l-1ubuntu1","3.0.0-1ubuntu1","3.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.15"}]}],"versions":["1.0.2g-1ubuntu13","1.0.2g-1ubuntu14","1.0.2n-1ubuntu1","1.1.0g-2ubuntu1","1.1.0g-2ubuntu2","1.1.0g-2ubuntu3","1.1.0g-2ubuntu4","1.1.0g-2ubuntu4.1","1.1.0g-2ubuntu4.3","1.1.1-1ubuntu2.1~18.04.1","1.1.1-1ubuntu2.1~18.04.2","1.1.1-1ubuntu2.1~18.04.3","1.1.1-1ubuntu2.1~18.04.4","1.1.1-1ubuntu2.1~18.04.5","1.1.1-1ubuntu2.1~18.04.6","1.1.1-1ubuntu2.1~18.04.7","1.1.1-1ubuntu2.1~18.04.8","1.1.1-1ubuntu2.1~18.04.9","1.1.1-1ubuntu2.1~18.04.10","1.1.1-1ubuntu2.1~18.04.13","1.1.1-1ubuntu2.1~18.04.14"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.8"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5","1.0.2n-1ubuntu5.1","1.0.2n-1ubuntu5.2","1.0.2n-1ubuntu5.3","1.0.2n-1ubuntu5.4","1.0.2n-1ubuntu5.5","1.0.2n-1ubuntu5.6","1.0.2n-1ubuntu5.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.12"}]}],"versions":["1.1.1c-1ubuntu4","1.1.1d-2ubuntu3","1.1.1d-2ubuntu6","1.1.1f-1ubuntu1","1.1.1f-1ubuntu2","1.1.1f-1ubuntu2.1","1.1.1f-1ubuntu2.2","1.1.1f-1ubuntu2.3","1.1.1f-1ubuntu2.4","1.1.1f-1ubuntu2.5","1.1.1f-1ubuntu2.8","1.1.1f-1ubuntu2.9","1.1.1f-1ubuntu2.10","1.1.1f-1ubuntu2.11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.27+esm5"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27","1.0.1f-1ubuntu2.27+esm1","1.0.1f-1ubuntu2.27+esm2","1.0.1f-1ubuntu2.27+esm3","1.0.1f-1ubuntu2.27+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.20+esm2"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12","1.0.2g-1ubuntu4.13","1.0.2g-1ubuntu4.14","1.0.2g-1ubuntu4.15","1.0.2g-1ubuntu4.16","1.0.2g-1ubuntu4.17","1.0.2g-1ubuntu4.18","1.0.2g-1ubuntu4.19","1.0.2g-1ubuntu4.20","1.0.2g-1ubuntu4.20+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.9~dfsg-1ubuntu3.1"}]}],"versions":["12.22.5~dfsg-5ubuntu1","12.22.7~dfsg-2ubuntu1","12.22.7~dfsg-2ubuntu3","12.22.9~dfsg-1ubuntu2","12.22.9~dfsg-1ubuntu3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.4"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1","2022.02-3ubuntu0.22.04.2","2022.02-3ubuntu0.22.04.3"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.02-2ubuntu0.6"}]}],"versions":["2023.05-2","2023.11-2","2023.11-3","2023.11-4","2023.11-5","2023.11-6","2023.11-8","2024.02-1","2024.02-2","2024.02-2ubuntu0.1","2024.02-2ubuntu0.3","2024.02-2ubuntu0.4","2024.02-2ubuntu0.5"],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.49.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cargo-audit-advisory-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220323-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.1-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"mariadb","product":"mariadb"},{"vendor":"netapp","product":"500f_firmware"},{"vendor":"netapp","product":"a250_firmware"},{"vendor":"netapp","product":"cloud_volumes_ontap_mediator"},{"vendor":"netapp","product":"clustered_data_ontap"},{"vendor":"netapp","product":"clustered_data_ontap_antivirus_connector"},{"vendor":"netapp","product":"santricity_smi-s_provider"},{"vendor":"netapp","product":"storagegrid"},{"vendor":"nodejs","product":"node.js"},{"vendor":"openssl","product":"openssl"},{"vendor":"siemens","product":"bfcclient"},{"vendor":"siemens","product":"industrial edge - opc ua connector"},{"vendor":"siemens","product":"industrial edge - simatic s7 connector app"},{"vendor":"siemens","product":"openpcs 7 v8.2"},{"vendor":"siemens","product":"openpcs 7 v9.0"},{"vendor":"siemens","product":"openpcs 7 v9.1"},{"vendor":"siemens","product":"ruggedcom crossbow station access controller (sac)"},{"vendor":"siemens","product":"ruggedcom rm1224 lte(4g) eu"},{"vendor":"siemens","product":"ruggedcom rm1224 lte(4g) nam"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"},{"vendor":"siemens","product":"scalance lpe9403"},{"vendor":"siemens","product":"scalance m804pb"},{"vendor":"siemens","product":"scalance m812-1 adsl-router"},{"vendor":"siemens","product":"scalance m816-1 adsl-router"},{"vendor":"siemens","product":"scalance m826-2 shdsl-router"},{"vendor":"siemens","product":"scalance m874-2"},{"vendor":"siemens","product":"scalance m874-3"},{"vendor":"siemens","product":"scalance m876-3"},{"vendor":"siemens","product":"scalance m876-3 (rok)"},{"vendor":"siemens","product":"scalance m876-4"},{"vendor":"siemens","product":"scalance m876-4 (eu)"},{"vendor":"siemens","product":"scalance m876-4 (nam)"},{"vendor":"siemens","product":"scalance mum853-1 (eu)"},{"vendor":"siemens","product":"scalance mum856-1 (eu)"},{"vendor":"siemens","product":"scalance mum856-1 (row)"},{"vendor":"siemens","product":"scalance s615 eec lan-router"},{"vendor":"siemens","product":"scalance s615 lan-router"},{"vendor":"siemens","product":"scalance sc622-2c"},{"vendor":"siemens","product":"scalance sc632-2c"},{"vendor":"siemens","product":"scalance sc636-2c"},{"vendor":"siemens","product":"scalance sc642-2c"},{"vendor":"siemens","product":"scalance sc646-2c"},{"vendor":"siemens","product":"scalance w1748-1 m12"},{"vendor":"siemens","product":"scalance w1750d (jp)"},{"vendor":"siemens","product":"scalance w1750d (row)"},{"vendor":"siemens","product":"scalance w1750d (usa)"},{"vendor":"siemens","product":"scalance w1788-1 m12"},{"vendor":"siemens","product":"scalance w1788-2 eec m12"},{"vendor":"siemens","product":"scalance w1788-2 m12"},{"vendor":"siemens","product":"scalance w1788-2ia m12"},{"vendor":"siemens","product":"scalance w721-1 rj45"},{"vendor":"siemens","product":"scalance w722-1 rj45"},{"vendor":"siemens","product":"scalance w734-1 rj45"},{"vendor":"siemens","product":"scalance w734-1 rj45 (usa)"},{"vendor":"siemens","product":"scalance w738-1 m12"},{"vendor":"siemens","product":"scalance w748-1 m12"},{"vendor":"siemens","product":"scalance w748-1 rj45"},{"vendor":"siemens","product":"scalance w761-1 rj45"},{"vendor":"siemens","product":"scalance w774-1 m12 eec"},{"vendor":"siemens","product":"scalance w774-1 rj45"},{"vendor":"siemens","product":"scalance w774-1 rj45 (usa)"},{"vendor":"siemens","product":"scalance w778-1 m12"},{"vendor":"siemens","product":"scalance w778-1 m12 eec"},{"vendor":"siemens","product":"scalance w778-1 m12 eec (usa)"},{"vendor":"siemens","product":"scalance w786-1 rj45"},{"vendor":"siemens","product":"scalance w786-2 rj45"},{"vendor":"siemens","product":"scalance w786-2 sfp"},{"vendor":"siemens","product":"scalance w786-2ia rj45"},{"vendor":"siemens","product":"scalance w788-1 m12"},{"vendor":"siemens","product":"scalance w788-1 rj45"},{"vendor":"siemens","product":"scalance w788-2 m12"},{"vendor":"siemens","product":"scalance w788-2 m12 eec"},{"vendor":"siemens","product":"scalance w788-2 rj45"},{"vendor":"siemens","product":"scalance wam763-1"},{"vendor":"siemens","product":"scalance wam766-1"},{"vendor":"siemens","product":"scalance wam766-1 (us)"},{"vendor":"siemens","product":"scalance wam766-1 eec"},{"vendor":"siemens","product":"scalance wam766-1 eec (us)"},{"vendor":"siemens","product":"scalance wum763-1"},{"vendor":"siemens","product":"scalance wum766-1"},{"vendor":"siemens","product":"scalance wum766-1 (usa)"},{"vendor":"siemens","product":"scalance x200-4p irt"},{"vendor":"siemens","product":"scalance x201-3p irt"},{"vendor":"siemens","product":"scalance x201-3p irt pro"},{"vendor":"siemens","product":"scalance x202-2irt"},{"vendor":"siemens","product":"scalance x202-2p irt"},{"vendor":"siemens","product":"scalance x202-2p irt pro"},{"vendor":"siemens","product":"scalance x204-2"},{"vendor":"siemens","product":"scalance x204-2fm"},{"vendor":"siemens","product":"scalance x204-2ld"},{"vendor":"siemens","product":"scalance x204-2ld ts"},{"vendor":"siemens","product":"scalance x204-2ts"},{"vendor":"siemens","product":"scalance x204irt"},{"vendor":"siemens","product":"scalance x204irt pro"},{"vendor":"siemens","product":"scalance x206-1"},{"vendor":"siemens","product":"scalance x206-1ld"},{"vendor":"siemens","product":"scalance x208"},{"vendor":"siemens","product":"scalance x208pro"},{"vendor":"siemens","product":"scalance x212-2"},{"vendor":"siemens","product":"scalance x212-2ld"},{"vendor":"siemens","product":"scalance x216"},{"vendor":"siemens","product":"scalance x224"},{"vendor":"siemens","product":"scalance x302-7 eec (230v)"},{"vendor":"siemens","product":"scalance x302-7 eec (230v, coated)"},{"vendor":"siemens","product":"scalance x302-7 eec (24v)"},{"vendor":"siemens","product":"scalance x302-7 eec (24v, coated)"},{"vendor":"siemens","product":"scalance x302-7 eec (2x 230v)"},{"vendor":"siemens","product":"scalance x302-7 eec (2x 230v, coated)"},{"vendor":"siemens","product":"scalance x302-7 eec (2x 24v)"},{"vendor":"siemens","product":"scalance x302-7 eec (2x 24v, coated)"},{"vendor":"siemens","product":"scalance x304-2fe"},{"vendor":"siemens","product":"scalance x306-1ld fe"},{"vendor":"siemens","product":"scalance x307-2 eec (230v)"},{"vendor":"siemens","product":"scalance x307-2 eec (230v, coated)"},{"vendor":"siemens","product":"scalance x307-2 eec (24v)"},{"vendor":"siemens","product":"scalance x307-2 eec (24v, coated)"},{"vendor":"siemens","product":"scalance x307-2 eec (2x 230v)"},{"vendor":"siemens","product":"scalance x307-2 eec (2x 230v, coated)"},{"vendor":"siemens","product":"scalance x307-2 eec (2x 24v)"},{"vendor":"siemens","product":"scalance x307-2 eec (2x 24v, coated)"},{"vendor":"siemens","product":"scalance x307-3"},{"vendor":"siemens","product":"scalance x307-3ld"},{"vendor":"siemens","product":"scalance x308-2"},{"vendor":"siemens","product":"scalance x308-2 rd (inkl. siplus variants)"},{"vendor":"siemens","product":"scalance x308-2ld"},{"vendor":"siemens","product":"scalance x308-2lh"},{"vendor":"siemens","product":"scalance x308-2lh+"},{"vendor":"siemens","product":"scalance x308-2m"},{"vendor":"siemens","product":"scalance x308-2m poe"},{"vendor":"siemens","product":"scalance x308-2m ts"},{"vendor":"siemens","product":"scalance x310"},{"vendor":"siemens","product":"scalance x310fe"},{"vendor":"siemens","product":"scalance x320-1 fe"},{"vendor":"siemens","product":"scalance x320-1-2ld fe"},{"vendor":"siemens","product":"scalance x408-2"},{"vendor":"siemens","product":"scalance xb205-3 (sc, pn)"},{"vendor":"siemens","product":"scalance xb205-3 (st, e/ip)"},{"vendor":"siemens","product":"scalance xb205-3 (st, pn)"},{"vendor":"siemens","product":"scalance xb205-3ld (sc, e/ip)"},{"vendor":"siemens","product":"scalance xb205-3ld (sc, pn)"},{"vendor":"siemens","product":"scalance xb208 (e/ip)"},{"vendor":"siemens","product":"scalance xb208 (pn)"},{"vendor":"siemens","product":"scalance xb213-3 (sc, e/ip)"},{"vendor":"siemens","product":"scalance xb213-3 (sc, pn)"},{"vendor":"siemens","product":"scalance xb213-3 (st, e/ip)"},{"vendor":"siemens","product":"scalance xb213-3 (st, pn)"},{"vendor":"siemens","product":"scalance xb213-3ld (sc, e/ip)"},{"vendor":"siemens","product":"scalance xb213-3ld (sc, pn)"},{"vendor":"siemens","product":"scalance xb216 (e/ip)"},{"vendor":"siemens","product":"scalance xb216 (pn)"},{"vendor":"siemens","product":"scalance xc206-2 (sc)"},{"vendor":"siemens","product":"scalance xc206-2 (st/bfoc)"},{"vendor":"siemens","product":"scalance xc206-2g poe"},{"vendor":"siemens","product":"scalance xc206-2g poe (54 v dc)"},{"vendor":"siemens","product":"scalance xc206-2g poe eec (54 v dc)"},{"vendor":"siemens","product":"scalance xc206-2sfp"},{"vendor":"siemens","product":"scalance xc206-2sfp eec"},{"vendor":"siemens","product":"scalance xc206-2sfp g"},{"vendor":"siemens","product":"scalance xc206-2sfp g (eip def.)"},{"vendor":"siemens","product":"scalance xc206-2sfp g eec"},{"vendor":"siemens","product":"scalance xc208"},{"vendor":"siemens","product":"scalance xc208eec"},{"vendor":"siemens","product":"scalance xc208g"},{"vendor":"siemens","product":"scalance xc208g (eip def.)"},{"vendor":"siemens","product":"scalance xc208g eec"},{"vendor":"siemens","product":"scalance xc208g poe"},{"vendor":"siemens","product":"scalance xc208g poe (54 v dc)"},{"vendor":"siemens","product":"scalance xc216"},{"vendor":"siemens","product":"scalance xc216-3g poe"},{"vendor":"siemens","product":"scalance xc216-3g poe (54 v dc)"},{"vendor":"siemens","product":"scalance xc216-4c"},{"vendor":"siemens","product":"scalance xc216-4c g"},{"vendor":"siemens","product":"scalance xc216-4c g (eip def.)"},{"vendor":"siemens","product":"scalance xc216-4c g eec"},{"vendor":"siemens","product":"scalance xc216eec"},{"vendor":"siemens","product":"scalance xc224"},{"vendor":"siemens","product":"scalance xc224-4c g"},{"vendor":"siemens","product":"scalance xc224-4c g (eip def.)"},{"vendor":"siemens","product":"scalance xc224-4c g eec"},{"vendor":"siemens","product":"scalance xf201-3p irt"},{"vendor":"siemens","product":"scalance xf202-2p irt"},{"vendor":"siemens","product":"scalance xf204"},{"vendor":"siemens","product":"scalance xf204 dna"},{"vendor":"siemens","product":"scalance xf204-2"},{"vendor":"siemens","product":"scalance xf204-2ba"},{"vendor":"siemens","product":"scalance xf204-2ba dna"},{"vendor":"siemens","product":"scalance xf204-2ba irt"},{"vendor":"siemens","product":"scalance xf204irt"},{"vendor":"siemens","product":"scalance xf206-1"},{"vendor":"siemens","product":"scalance xf208"},{"vendor":"siemens","product":"scalance xm408-4c"},{"vendor":"siemens","product":"scalance xm408-4c (l3 int.)"},{"vendor":"siemens","product":"scalance xm408-8c"},{"vendor":"siemens","product":"scalance xm408-8c (l3 int.)"},{"vendor":"siemens","product":"scalance xm416-4c"},{"vendor":"siemens","product":"scalance xm416-4c (l3 int.)"},{"vendor":"siemens","product":"scalance xp208"},{"vendor":"siemens","product":"scalance xp208 (ethernet/ip)"},{"vendor":"siemens","product":"scalance xp208eec"},{"vendor":"siemens","product":"scalance xp208poe eec"},{"vendor":"siemens","product":"scalance xp216"},{"vendor":"siemens","product":"scalance xp216 (ethernet/ip)"},{"vendor":"siemens","product":"scalance xp216eec"},{"vendor":"siemens","product":"scalance xp216poe eec"},{"vendor":"siemens","product":"scalance xr324-12m (230v, ports on front)"},{"vendor":"siemens","product":"scalance xr324-12m (230v, ports on rear)"},{"vendor":"siemens","product":"scalance xr324-12m (24v, ports on front)"},{"vendor":"siemens","product":"scalance xr324-12m (24v, ports on rear)"},{"vendor":"siemens","product":"scalance xr324-12m ts (24v)"},{"vendor":"siemens","product":"scalance xr324-4m eec (100-240vac/60-250vdc, ports on front)"},{"vendor":"siemens","product":"scalance xr324-4m eec (100-240vac/60-250vdc, ports on rear)"},{"vendor":"siemens","product":"scalance xr324-4m eec (24v, ports on front)"},{"vendor":"siemens","product":"scalance xr324-4m eec (24v, ports on rear)"},{"vendor":"siemens","product":"scalance xr324-4m eec (2x 100-240vac/60-250vdc, ports on front)"},{"vendor":"siemens","product":"scalance xr324-4m eec (2x 100-240vac/60-250vdc, ports on rear)"},{"vendor":"siemens","product":"scalance xr324-4m eec (2x 24v, ports on front)"},{"vendor":"siemens","product":"scalance xr324-4m eec (2x 24v, ports on rear)"},{"vendor":"siemens","product":"scalance xr324-4m poe (230v, ports on front)"},{"vendor":"siemens","product":"scalance xr324-4m poe (230v, ports on rear)"},{"vendor":"siemens","product":"scalance xr324-4m poe (24v, ports on front)"},{"vendor":"siemens","product":"scalance xr324-4m poe (24v, ports on rear)"},{"vendor":"siemens","product":"scalance xr324-4m poe ts (24v, ports on front)"},{"vendor":"siemens","product":"scalance xr324wg (24 x fe, ac 230v)"},{"vendor":"siemens","product":"scalance xr324wg (24 x fe, dc 24v)"},{"vendor":"siemens","product":"scalance xr326-2c poe wg"},{"vendor":"siemens","product":"scalance xr326-2c poe wg (without ul)"},{"vendor":"siemens","product":"scalance xr328-4c wg (24xfe, 4xge, 24v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (24xfe, 4xge,dc24v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (24xfe,4xge,ac230v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (28xge, ac 230v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (28xge, dc 24v)"},{"vendor":"siemens","product":"scalance xr524-8c, 1x230v"},{"vendor":"siemens","product":"scalance xr524-8c, 1x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr524-8c, 24v"},{"vendor":"siemens","product":"scalance xr524-8c, 24v (l3 int.)"},{"vendor":"siemens","product":"scalance xr524-8c, 2x230v"},{"vendor":"siemens","product":"scalance xr524-8c, 2x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr526-8c, 1x230v"},{"vendor":"siemens","product":"scalance xr526-8c, 1x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr526-8c, 24v"},{"vendor":"siemens","product":"scalance xr526-8c, 24v (l3 int.)"},{"vendor":"siemens","product":"scalance xr526-8c, 2x230v"},{"vendor":"siemens","product":"scalance xr526-8c, 2x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr528-6m"},{"vendor":"siemens","product":"scalance xr528-6m (2hr2)"},{"vendor":"siemens","product":"scalance xr528-6m (2hr2, l3 int.)"},{"vendor":"siemens","product":"scalance xr528-6m (l3 int.)"},{"vendor":"siemens","product":"scalance xr552-12m"},{"vendor":"siemens","product":"scalance xr552-12m (2hr2)"},{"vendor":"siemens","product":"scalance xr552-12m (2hr2, l3 int.)"},{"vendor":"siemens","product":"security configuration tool (sct)"},{"vendor":"siemens","product":"simatic cloud connect 7 cc712"},{"vendor":"siemens","product":"simatic cloud connect 7 cc716"},{"vendor":"siemens","product":"simatic cp 1242-7 v2"},{"vendor":"siemens","product":"simatic cp 1243-1"},{"vendor":"siemens","product":"simatic cp 1243-7 lte eu"},{"vendor":"siemens","product":"simatic cp 1243-7 lte us"},{"vendor":"siemens","product":"simatic cp 1243-8 irc"},{"vendor":"siemens","product":"simatic cp 1542sp-1"},{"vendor":"siemens","product":"simatic cp 1543-1"},{"vendor":"siemens","product":"simatic cp 1543sp-1"},{"vendor":"siemens","product":"simatic cp 1545-1"},{"vendor":"siemens","product":"simatic cp 1626"},{"vendor":"siemens","product":"simatic cp 1628"},{"vendor":"siemens","product":"simatic cp 343-1 advanced"},{"vendor":"siemens","product":"simatic cp 443-1 advanced"},{"vendor":"siemens","product":"simatic cp 443-1 opc ua"},{"vendor":"siemens","product":"simatic drive controller cpu 1504d tf"},{"vendor":"siemens","product":"simatic drive controller cpu 1507d tf"},{"vendor":"siemens","product":"simatic et 200sp cpu 1510sp f-1 pn"},{"vendor":"siemens","product":"simatic et 200sp cpu 1510sp-1 pn"},{"vendor":"siemens","product":"simatic et 200sp cpu 1512sp f-1 pn"},{"vendor":"siemens","product":"simatic et 200sp cpu 1512sp-1 pn"},{"vendor":"siemens","product":"simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants)"},{"vendor":"siemens","product":"simatic hmi unified comfort panels family"},{"vendor":"siemens","product":"simatic logon v1.6"},{"vendor":"siemens","product":"simatic mv540 h"},{"vendor":"siemens","product":"simatic mv540 s"},{"vendor":"siemens","product":"simatic mv550 h"},{"vendor":"siemens","product":"simatic mv550 s"},{"vendor":"siemens","product":"simatic mv560 u"},{"vendor":"siemens","product":"simatic mv560 x"},{"vendor":"siemens","product":"simatic net pc software v14"},{"vendor":"siemens","product":"simatic net pc software v15"},{"vendor":"siemens","product":"simatic net pc software v16"},{"vendor":"siemens","product":"simatic net pc software v17"},{"vendor":"siemens","product":"simatic pcs 7 telecontrol"},{"vendor":"siemens","product":"simatic pcs 7 v8.2"},{"vendor":"siemens","product":"simatic pcs 7 v9.0"},{"vendor":"siemens","product":"simatic pcs 7 v9.1"},{"vendor":"siemens","product":"simatic pcs neo (administration console)"},{"vendor":"siemens","product":"simatic pdm"},{"vendor":"siemens","product":"simatic process historian opc ua server"},{"vendor":"siemens","product":"simatic rf166c"},{"vendor":"siemens","product":"simatic rf185c"},{"vendor":"siemens","product":"simatic rf186c"},{"vendor":"siemens","product":"simatic rf186ci"},{"vendor":"siemens","product":"simatic rf188c"},{"vendor":"siemens","product":"simatic rf188ci"},{"vendor":"siemens","product":"simatic rf360r"},{"vendor":"siemens","product":"simatic rf610r"},{"vendor":"siemens","product":"simatic rf615r"},{"vendor":"siemens","product":"simatic rf650r"},{"vendor":"siemens","product":"simatic rf680r"},{"vendor":"siemens","product":"simatic rf685r"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1211c ac/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1211c dc/dc/dc"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1211c dc/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1212c ac/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1212c dc/dc/dc"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1212c dc/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1212fc dc/dc/dc"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1212fc dc/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1214c ac/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1214c dc/dc/dc"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1214c dc/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1214fc dc/dc/dc"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1214fc dc/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1215c ac/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1215c dc/dc/dc"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1215c dc/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1215fc dc/dc/dc"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1215fc dc/dc/rly"},{"vendor":"siemens","product":"simatic s7-1200 cpu 1217c dc/dc/dc"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511c-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511f-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511t-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511tf-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1512c-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1513-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1513f-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1513r-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515f-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515r-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515t-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515tf-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1516-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1516f-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1516t-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1516tf-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517f-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517h-3 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517t-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517tf-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518hf-4 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518t-4 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518tf-4 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu s7-1518-4 pn/dp odk"},{"vendor":"siemens","product":"simatic s7-1500 cpu s7-1518f-4 pn/dp odk"},{"vendor":"siemens","product":"simatic s7-1500 et 200pro: cpu 1513pro f-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 et 200pro: cpu 1513pro-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 et 200pro: cpu 1516pro f-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 et 200pro: cpu 1516pro-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 software controller v2"},{"vendor":"siemens","product":"simatic s7-plcsim advanced"},{"vendor":"siemens","product":"simatic step 7 v15.1"},{"vendor":"siemens","product":"simatic step 7 v16"},{"vendor":"siemens","product":"simatic step 7 v17"},{"vendor":"siemens","product":"simatic step 7 v5"},{"vendor":"siemens","product":"simatic wincc unified (tia portal)"},{"vendor":"siemens","product":"simatic wincc v15.1"},{"vendor":"siemens","product":"simatic wincc v16"},{"vendor":"siemens","product":"simatic wincc v17"},{"vendor":"siemens","product":"simatic wincc v7.3"},{"vendor":"siemens","product":"simatic wincc v7.4"},{"vendor":"siemens","product":"simatic wincc v7.5"},{"vendor":"siemens","product":"simocode es v15.1"},{"vendor":"siemens","product":"simocode es v16"},{"vendor":"siemens","product":"simocode es v17"},{"vendor":"siemens","product":"simotion"},{"vendor":"siemens","product":"simotion scout tia v5.3"},{"vendor":"siemens","product":"simotion scout tia v5.4"},{"vendor":"siemens","product":"sinamics dcc v15.1"},{"vendor":"siemens","product":"sinamics dcc v16"},{"vendor":"siemens","product":"sinamics startdrive v15.1"},{"vendor":"siemens","product":"sinamics startdrive v16"},{"vendor":"siemens","product":"sinamics startdrive v17"},{"vendor":"siemens","product":"sinaut software st7sc"},{"vendor":"siemens","product":"sinaut st7cc"},{"vendor":"siemens","product":"sinec ins"},{"vendor":"siemens","product":"sinec nms"},{"vendor":"siemens","product":"sinema remote connect server"},{"vendor":"siemens","product":"siplus et 200sp cp 1543sp-1 isec"},{"vendor":"siemens","product":"siplus et 200sp cp 1543sp-1 isec tx rail"},{"vendor":"siemens","product":"siplus et 200sp cpu 1510sp f-1 pn"},{"vendor":"siemens","product":"siplus et 200sp cpu 1510sp f-1 pn rail"},{"vendor":"siemens","product":"siplus et 200sp cpu 1510sp-1 pn"},{"vendor":"siemens","product":"siplus et 200sp cpu 1510sp-1 pn rail"},{"vendor":"siemens","product":"siplus et 200sp cpu 1512sp f-1 pn"},{"vendor":"siemens","product":"siplus et 200sp cpu 1512sp f-1 pn rail"},{"vendor":"siemens","product":"siplus et 200sp cpu 1512sp-1 pn"},{"vendor":"siemens","product":"siplus et 200sp cpu 1512sp-1 pn rail"},{"vendor":"siemens","product":"siplus net cp 1242-7 v2"},{"vendor":"siemens","product":"siplus net cp 1543-1"},{"vendor":"siemens","product":"siplus net cp 343-1 advanced"},{"vendor":"siemens","product":"siplus net cp 443-1 advanced"},{"vendor":"siemens","product":"siplus net scalance x202-2p irt"},{"vendor":"siemens","product":"siplus net scalance xc206-2"},{"vendor":"siemens","product":"siplus net scalance xc206-2sfp"},{"vendor":"siemens","product":"siplus net scalance xc208"},{"vendor":"siemens","product":"siplus net scalance xc216-4c"},{"vendor":"siemens","product":"siplus s7-1200 cp 1243-1"},{"vendor":"siemens","product":"siplus s7-1200 cp 1243-1 rail"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1212 ac/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1212 dc/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1212c ac/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1212c dc/dc/dc"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1212c dc/dc/dc rail"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1214 ac/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1214 dc/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1214c ac/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1214c dc/dc/dc"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1214c dc/dc/dc rail"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1214c dc/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1214fc dc/dc/dc"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1214fc dc/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1215 ac/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1215 dc/dc/dc"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1215 dc/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1215c ac/dc/rly"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1215c dc/dc/dc"},{"vendor":"siemens","product":"siplus s7-1200 cpu 1215fc dc/dc/dc"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1511-1 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1511-1 pn t1 rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1511-1 pn tx rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1511f-1 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1513-1 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1513f-1 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515f-2 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515f-2 pn rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515f-2 pn t2 rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515r-2 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515r-2 pn tx rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516-3 pn/dp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516-3 pn/dp rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516-3 pn/dp tx rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516f-3 pn/dp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516f-3 pn/dp rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1517h-3 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518f-4 pn/dp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518hf-4 pn"},{"vendor":"siemens","product":"siplus tim 1531 irc"},{"vendor":"siemens","product":"sirius safety es v17 (tia portal)"},{"vendor":"siemens","product":"sirius soft starter es v15.1 (tia portal)"},{"vendor":"siemens","product":"sirius soft starter es v16 (tia portal)"},{"vendor":"siemens","product":"sirius soft starter es v17 (tia portal)"},{"vendor":"siemens","product":"telecontrol server basic v3"},{"vendor":"siemens","product":"tia administrator"},{"vendor":"siemens","product":"tia portal cloud v16"},{"vendor":"siemens","product":"tia portal cloud v17"},{"vendor":"siemens","product":"tim 1531 irc"},{"vendor":"tenable","product":"nessus"}],"references":[{"url":"https://www.openssl.org/news/secadv/20220315.txt","tags":["x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246","tags":["x_transferred","web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65","tags":["x_transferred","web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83","tags":["x_transferred","web"]},{"url":"https://www.debian.org/security/2022/dsa-5103","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220321-0002/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.tenable.com/security/tns-2022-06","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.tenable.com/security/tns-2022-07","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.tenable.com/security/tns-2022-08","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2022/May/33","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"http://seclists.org/fulldisclosure/2022/May/35","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"http://seclists.org/fulldisclosure/2022/May/38","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://support.apple.com/kb/HT213257","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://support.apple.com/kb/HT213256","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://support.apple.com/kb/HT213255","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.tenable.com/security/tns-2022-09","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220429-0005/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html","tags":["x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://security.gentoo.org/glsa/202210-02","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","tags":["x_transferred","web","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-712929.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-108696.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-028723.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019200.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0778","tags":["web","advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65","tags":["web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83","tags":["web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2022-0014.html","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220321-0002","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20220429-0005","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ","tags":["web"]},{"url":"https://github.com/advisories/GHSA-x3mh-jvjw-3xwx","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-0778","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-1065.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2022-0778","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5326","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0778","tags":["report"]},{"url":"https://bugzilla.redhat.com/2062202","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-5326.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-0778","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1647550273.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1647550569.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1647550603","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1647550812.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1647550873.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0778.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0778","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0113.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30174","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5328-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1603","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1292","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2097","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1924","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1938","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1971","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3712","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1830","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32085","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32087","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-47015","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2092","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2093","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2094","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2095","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1065","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062202","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1065.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0778","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1066","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1066.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1071","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1071.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1073","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1073.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1076","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1076.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1077","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1077.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1078","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1078.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1082","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1082.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1091","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1091.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1112","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1112.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1263","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056370","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1263.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-0920","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-0920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0920","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cbcf01128d0a92e131bd09f1688fe032480b65ca","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4028","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4028","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bc0bdc5afaa74","tags":["article"]},{"url":"https://lkml.org/lkml/2021/10/4/697","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4083","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4083","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4083","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4155","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=983d8e60f50806f90534cc5373d0ce867e5aaf79","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45417","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0330","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/25/12","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22942","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22942","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24407","tags":["advisory"]},{"url":"https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25235","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25235","tags":["advisory"]},{"url":"https://blog.hartwork.org/posts/expat-2-4-5-released/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25236","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25236","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25236","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25315","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25315","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1389","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064321","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1389.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3516","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3516","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3516","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3517","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3517","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3518","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3518","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3537","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3537","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22720","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22720","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22720","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22720","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23308","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1519","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1519.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4896","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2067945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2086834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2090138","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4896.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25032","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25032","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1271","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24903","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24903","tags":["advisory"]},{"url":"https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25636","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git/commit/?id=b1a5983f56e371046dcf164f90bfaf704d2b89f6","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2022/02/21/2","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4899","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4899.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5326.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:1065","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:4899","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5326","tags":["advisory"]},{"url":"https://crates.io/crates/openssl-src","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/-2022-861/suse-ru-20220861-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182959","tags":["report"]},{"url":"https://bugzilla.suse.com/1195149","tags":["report"]},{"url":"https://bugzilla.suse.com/1195792","tags":["report"]},{"url":"https://bugzilla.suse.com/1195856","tags":["report"]},{"url":"https://bugzilla.suse.com/1196877","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0778","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220851-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1180995","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220853-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220854-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220856-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220857-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196249","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220859-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220860-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220861-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220935-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221459-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194819","tags":["report"]},{"url":"https://bugzilla.suse.com/1197283","tags":["report"]},{"url":"https://bugzilla.suse.com/1198247","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0235","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221461-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221462-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214915-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214916-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221536-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1118088","tags":["report"]},{"url":"https://bugzilla.suse.com/1184177","tags":["report"]},{"url":"https://bugzilla.suse.com/1197279","tags":["report"]},{"url":"https://bugzilla.suse.com/1197417","tags":["report"]},{"url":"https://bugzilla.suse.com/1197637","tags":["report"]},{"url":"https://bugzilla.suse.com/1198556","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24302","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-0778","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5328-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6457-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7894-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-1292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-4304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-4450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-5678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-6237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-0727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-1298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-2511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-4741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-5535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-6119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-9143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-13176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-2295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-9232","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V7FRPEEZ7WUHWJ2PK7C5GZJJTXRGWJB2/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVFNM75TAEBUEYENWHOXMRWTJPWBKDFT/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-0778","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-15T17:05:20.382Z","modified":"2026-10-14T12:12:36.346Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:34:41.34666Z"}],"euvd":[{"id":"EUVD-2022-1575","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-15T17:05:20Z","modified":"2026-10-14T12:12:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:15.969628Z"}],"ghsa":[{"id":"GHSA-x3mh-jvjw-3xwx","title":"openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-16T00:00:45Z","modified":"2024-06-24T21:24:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:37:55.455438Z"}],"nvd":[{"id":"CVE-2022-0778","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-15T17:15:08.513Z","modified":"2026-10-14T13:17:14.377Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:07:13.7085Z"}],"osv":[{"id":"ALPINE-CVE-2022-0778","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-15T17:15:08.513Z","modified":"2026-11-03T07:30:23.942723265Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-9051","title":"CVE-2022-0778 affecting package openssl for versions less than 1.1.1k-12","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-15T17:15:08Z","modified":"2026-04-21T04:34:58.420131Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:11.397546Z"},{"id":"BELL-CVE-2022-0778","title":"CVE-2022-0778 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:48.210539Z","modified":"2026-01-26T09:48:57.157424Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-0778","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-15T17:05:20.382Z","modified":"2026-10-28T10:25:11.941979904Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:22.824781Z"},{"id":"DEBIAN-CVE-2022-0778","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-15T17:15:08.513Z","modified":"2026-11-03T08:00:56.902189559Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"GHSA-x3mh-jvjw-3xwx","title":"openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-16T00:00:45Z","modified":"2026-09-10T03:49:28.441064213Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:46:59.484835Z"},{"id":"JLSEC-2026-227","title":"openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates","description":"The `BN_mod_sqrt()` function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the `BN_mod_sqrt()` where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2026-04-27T18:33:55.942Z","modified":"2026-07-25T18:24:07.318245671Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2022-1603","title":"openssl security update","description":"Cryptography and SSL/TLS Toolkit.\r\n\r\nSecurity Fix(es):\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the openssl 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects openssl versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in openssl 3.0.2 (Affected 3.0.0,3.0.1). Fixed in openssl 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in openssl 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)","status":"published","published":"2022-03-30T11:04:52Z","modified":"2026-08-18T01:16:34.967315329Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1898","title":"intel-sgx-ssl security update","description":"The Intel® Software Guard Extensions SSL (Intel® SGX SSL) cryptographic library is intended to provide cryptographic services for Intel® Software Guard Extensions (SGX) enclave applications. The Intel® SGX SSL cryptographic library is based on the underlying OpenSSL* Open Source project, providing a full-strength general purpose cryptography library. Supported OpenSSL version is 1.1.1l.\r\n\r\nSecurity Fix(es):\r\n\r\nThe c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).(CVE-2022-1292)\r\n\r\nIn addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).(CVE-2022-2068)\r\n\r\nAES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn\u0026apos;t written. In the special case of \u0026quot;in place\u0026quot; encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).(CVE-2022-2097)\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)","status":"published","published":"2022-09-08T11:05:10Z","modified":"2026-08-18T01:17:18.584515051Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1924","title":"linux-sgx security update","description":"Intel(R) Software Guard Extensions (Intel(R) SGX) is an Intel technology for application developers seeking to protect select code and data from disclosure or modification.\r\n\r\nSecurity Fix(es):\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)","status":"published","published":"2022-09-16T11:05:14Z","modified":"2026-08-18T01:17:17.12346087Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1938","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\n\r\n\r\nSecurity Fix(es):\r\n\r\nThe X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0026apos;s s_server, s_client and verify tools have support for the \u0026quot;-crl_download\u0026quot; option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0026apos;s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).(CVE-2020-1971)\r\n\r\nCalls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).(CVE-2021-23840)\r\n\r\nWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.(CVE-2017-3735)\r\n\r\nDuring key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).(CVE-2018-0732)\r\n\r\nASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0026apos;s own \u0026quot;d2i\u0026quot; functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \u0026quot;data\u0026quot; and \u0026quot;length\u0026quot; fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \u0026quot;data\u0026quot; field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).(CVE-2021-3712)\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)","status":"published","published":"2022-09-23T11:05:15Z","modified":"2026-08-18T01:17:18.526078303Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2023-1830","title":"mariadb security update","description":"MariaDB turns data into structured information in a wide array of applications, ranging from banking to websites. It is an enhanced, drop-in replacement for MySQL. MariaDB is used because it is fast, scalable and robust, with a rich ecosystem of storage engines, plugins and many other tools make it very versatile for a wide variety of use cases.\r\n\r\nSecurity Fix(es):\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)\r\n\r\nMariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.(CVE-2022-32085)\r\n\r\nMariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.(CVE-2022-32087)\r\n\r\nMariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.(CVE-2022-32091)\r\n\r\nMariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.(CVE-2022-47015)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:18:03.276650688Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2024-2092","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\nASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0026apos;s own \u0026quot;d2i\u0026quot; functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \u0026quot;data\u0026quot; and \u0026quot;length\u0026quot; fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \u0026quot;data\u0026quot; field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).(CVE-2021-3712)\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)","status":"published","published":"2024-09-06T11:07:34Z","modified":"2026-08-18T01:18:36.215523242Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-2093","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\nASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0026apos;s own \u0026quot;d2i\u0026quot; functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \u0026quot;data\u0026quot; and \u0026quot;length\u0026quot; fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \u0026quot;data\u0026quot; field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).(CVE-2021-3712)\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)","status":"published","published":"2024-09-06T11:07:34Z","modified":"2026-08-18T01:18:36.374708625Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-2094","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\nASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0026apos;s own \u0026quot;d2i\u0026quot; functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \u0026quot;data\u0026quot; and \u0026quot;length\u0026quot; fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \u0026quot;data\u0026quot; field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).(CVE-2021-3712)\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)","status":"published","published":"2024-09-06T11:07:34Z","modified":"2026-08-18T01:18:36.259054199Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-2095","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\nASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0026apos;s own \u0026quot;d2i\u0026quot; functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \u0026quot;data\u0026quot; and \u0026quot;length\u0026quot; fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \u0026quot;data\u0026quot; field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).(CVE-2021-3712)\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)","status":"published","published":"2024-09-06T11:07:34Z","modified":"2026-08-18T01:18:36.3362943Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2022:1065","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:27:47Z","modified":"2026-10-09T10:03:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1066","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:28:21Z","modified":"2026-10-09T10:03:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1071","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:28:13Z","modified":"2026-10-09T10:03:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1073","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:27:56Z","modified":"2026-10-09T10:03:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1076","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:28:30Z","modified":"2026-10-09T10:03:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1077","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:28:05Z","modified":"2026-10-09T10:03:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1078","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:27:39Z","modified":"2026-10-09T10:03:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1082","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:28:38Z","modified":"2026-10-09T10:03:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1091","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:28:45Z","modified":"2026-10-09T10:03:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1112","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T16:27:40Z","modified":"2026-10-09T10:03:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1263","title":"Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.22","status":"published","published":"2024-09-30T16:27:48Z","modified":"2026-10-15T10:02:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1389","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP11 security update","status":"published","published":"2024-09-30T16:27:57Z","modified":"2026-10-15T10:02:29Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1519","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.2 Security Update","status":"published","published":"2024-09-30T16:28:32Z","modified":"2026-10-09T10:03:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:4896","title":"Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.0]","status":"published","published":"2024-09-30T16:28:41Z","modified":"2026-10-09T10:04:12Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:4899","title":"Red Hat Security Advisory: compat-openssl11 security and bug fix update","status":"published","published":"2024-09-30T16:29:17Z","modified":"2026-10-09T10:04:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5326","title":"Red Hat Security Advisory: compat-openssl10 security update","status":"published","published":"2024-09-30T16:30:30Z","modified":"2026-10-09T10:04:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:1065","title":"Important: openssl security update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-28T07:46:07Z","modified":"2026-02-05T10:30:10.08833Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:4899","title":"Important: compat-openssl11 security and bug fix update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. compat-openssl11 provides the legacy 1.1 version of OpenSSL for use with older binaries.\n\nSecurity Fix(es):\n\n* openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* compat-openssl11 breaks in FIPS (BZ#2091968)","status":"published","published":"2022-06-02T21:13:31Z","modified":"2026-02-05T13:00:06.502366Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:5326","title":"Low: compat-openssl10 security update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. compat-openssl10 provides the legacy 1.0 version of OpenSSL for use with older binaries.\n\nSecurity Fix(es):\n\n* compat-openssl10: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-06-28T10:53:54Z","modified":"2026-02-04T17:15:12.714989Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-0778","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2022-03-15T00:00:00Z","modified":"2026-10-05T19:20:06.953116397Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"ALSA-2022:1065","title":"Important: openssl security update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-28T07:46:07Z","modified":"2026-10-29T11:01:14.648711995Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:5326","title":"Low: compat-openssl10 security update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. compat-openssl10 provides the legacy 1.0 version of OpenSSL for use with older binaries.\nSecurity Fix(es):\n* compat-openssl10: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-06-30T00:00:00Z","modified":"2026-10-29T11:01:03.781463285Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"BIT-mariadb-2022-0778","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2024-03-06T11:03:29.776Z","modified":"2026-10-16T09:45:26.704373217Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mariadb-min-2022-0778","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2025-06-10T11:49:27.748Z","modified":"2026-10-16T09:45:12.199140516Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mysql-client-2022-0778","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2024-03-06T11:05:22.285Z","modified":"2026-10-16T09:45:27.383582462Z","updated_at":"2026-11-02T15:28:33.469426Z"},{"id":"BIT-node-2022-0778","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2024-03-06T11:04:37.785Z","modified":"2026-10-16T09:45:19.840950777Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"BIT-node-min-2022-0778","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","status":"published","published":"2024-12-16T14:03:14.529Z","modified":"2026-10-16T09:45:30.576137591Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"CLSA-2022-1647550273","title":"Fix of CVE: CVE-2022-0778","description":"- CVE-2022-0778: Fix possible infinite loop in BN_mod_sqrt()","status":"published","published":"2022-03-17T20:51:13Z","modified":"2026-06-01T00:33:15.495553505Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1647550569","title":"Fixed CVE-2022-0778 in openssl","description":"- CVE-2022-0778: Fix possible infinite loop in BN_mod_sqrt()","status":"published","published":"2022-03-17T20:56:09Z","modified":"2026-06-01T00:33:24.283432441Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1647550603","title":"Fix CVE(s): CVE-2022-0778","description":"\n   * SECURITY UPDATE: Infinite loop in BN_mod_sqrt()\n     - debian/patches/CVE-2022-0778.patch: fix infinite loop in crypto/bn/bn_sqrt.c.\n     - CVE-2022-0778","status":"published","published":"2022-03-17T20:56:43Z","modified":"2026-06-04T10:03:18.281393Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1647550812","title":"Fix of CVE: CVE-2022-0778","description":"- CVE-2022-0778: Fix possible infinite loop in BN_mod_sqrt()","status":"published","published":"2022-03-17T21:00:12Z","modified":"2026-06-01T00:33:10.718096805Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1647550873","title":"Fix of CVE: CVE-2022-0778","description":"- CVE-2022-0778: Fix possible infinite loop in BN_mod_sqrt()","status":"published","published":"2022-03-17T21:01:13Z","modified":"2026-06-01T00:33:20.181003315Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-2952-1","title":"openssl - security update","status":"published","published":"2022-03-17T00:00:00Z","modified":"2026-03-09T01:20:59.040356Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-2953-1","title":"openssl1.0 - security update","status":"published","published":"2022-03-17T00:00:00Z","modified":"2026-03-09T01:17:52.907068Z","updated_at":"2026-11-02T15:46:11.189256Z"}]},"sources_more":{"osv":30}}