{"id":"CVE-2022-2068","aliases":["ALPINE-CVE-2022-2068","ALSA-2022:5818","ALSA-2022:6224","AZL-9967","BELL-CVE-2022-2068","CLSA-2022-1657814965","CLSA-2022-1657816312","CLSA-2022-1657816793","CLSA-2022-1657817606","CLSA-2022-1658171496","CLSA-2024-1719925589","DEBIAN-CVE-2022-2068","DSA-5169-1","EUVD-2022-34360","GHSA-xjxr-x4h8-946x","JLSEC-2026-229","MGASA-2022-0246","OESA-2022-1737","OESA-2022-1898","OESA-2022-1899","RHSA-2022:5818","RHSA-2022:6224","RHSA-2022:8840","RHSA-2022:8917","RHSA-2023:5931","RHSA-2023:5979","RHSA-2023:5980","RHSA-2023:5982","RHSA-2023:6818","RLSA-2022:5818","RLSA-2023:6818","SUSE-SU-2022:2179-1","SUSE-SU-2022:2180-1","SUSE-SU-2022:2181-1","SUSE-SU-2022:2182-1","SUSE-SU-2022:2197-1","SUSE-SU-2022:2251-1","SUSE-SU-2022:2251-2","SUSE-SU-2022:2306-1","SUSE-SU-2022:2308-1","SUSE-SU-2022:2309-1","SUSE-SU-2022:2321-1","UBUNTU-CVE-2022-2068","USN-5488-1","USN-5488-2","USN-6457-1","USN-7018-1","openSUSE-SU-2024:12159-1","openSUSE-SU-2024:12178-1","openSUSE-SU-2025:15136-1"],"status":"published","title":"The c_rehash script allows command injection","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.96391,"percentile":0.9988,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2022-06-21T00:00:00Z","modified":"2026-11-05T08:07:04Z","fixes":[{"ecosystem":"Azure Linux:2","package":"openssl","fixed_in":["1.1.1k-17"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openssl","fixed_in":["3.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["3.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["3.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"openssl","fixed_in":["1.1.1n-0+deb10u3"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"openssl","fixed_in":["1.1.1n-0+deb11u3"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenSSL_jll","fixed_in":["1.1.16+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"Openresty_jll","fixed_in":["1.21.4+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"openssl","fixed_in":["1.1.1p-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openssl","fixed_in":["1.1.1f-17.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"openssl","fixed_in":["1.1.1f-17.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"openssl","fixed_in":["1.1.1m-6.oe2203"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openssl-1_1","fixed_in":["1.1.0i-150100.14.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openssl-1_1","fixed_in":["1.1.0i-150100.14.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openssl-1_1","fixed_in":["1.1.0i-150100.14.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openssl-1_1","fixed_in":["1.1.0i-150100.14.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openssl-1_1","fixed_in":["1.1.0i-150100.14.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"openssl-1_1","fixed_in":["1.1.0i-150100.14.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openssl","fixed_in":["1.0.2j-60.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"openssl","fixed_in":["1.0.2j-60.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openssl","fixed_in":["1.0.2j-60.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openssl","fixed_in":["1.0.2j-60.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openssl","fixed_in":["1.0.2j-60.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openssl","fixed_in":["1.0.2j-60.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openssl","fixed_in":["1.0.2j-60.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.56.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssl-1_0_0","fixed_in":["1.0.2p-3.56.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.27+esm10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssl","fixed_in":["1.0.2g-1ubuntu4.20+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssl","fixed_in":["1.0.2g-1ubuntu4.fips.4.20.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openssl","fixed_in":["1.1.1-1ubuntu2.1~18.04.19"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","fixed_in":["1.0.2n-1ubuntu5.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"openssl","fixed_in":["1.1.1-1ubuntu2.fips.2.1~18.04.20"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openssl","fixed_in":["1.1.1f-1ubuntu2.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssl","fixed_in":["1.1.1f-1ubuntu2.fips.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nodejs","fixed_in":["12.22.9~dfsg-1ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openssl","fixed_in":["3.0.2-0ubuntu1.5"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_1","fixed_in":["1.1.1p-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Azure Linux:2","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1k-17"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.21+tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssl-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.21+tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssl1.0.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.21+tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.21+tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-63.el6.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-0+deb10u3"}]}],"versions":["1.1.1c-1","1.1.1d-0+deb10u1","1.1.1d-0+deb10u2","1.1.1d-0+deb10u3","1.1.1d-0+deb10u4","1.1.1d-0+deb10u5","1.1.1d-0+deb10u6","1.1.1d-0+deb10u7","1.1.1d-0+deb10u8","1.1.1d-1","1.1.1d-2","1.1.1e-1","1.1.1f-1","1.1.1g-1","1.1.1h-1","1.1.1i-1","1.1.1i-2","1.1.1i-3","1.1.1j-1","1.1.1k-1","1.1.1l-1","1.1.1m-1","1.1.1n-0+deb10u1","1.1.1n-0+deb10u2"]},{"source":"osv","ecosystem":"Debian:11","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-0+deb11u3"}]}],"versions":["1.1.1k-1","1.1.1k-1+deb11u1","1.1.1k-1+deb11u2","1.1.1l-1","1.1.1m-0+deb11u1","1.1.1m-1","1.1.1n-0+deb11u1","1.1.1n-0+deb11u2"]},{"source":"osv","ecosystem":"Julia","package":"OpenSSL_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.16+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"Openresty_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.21.4+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1p-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-17.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-17.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1m-6.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"intel-sgx-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-4.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"intel-sgx-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-4.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"intel-sgx-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-2.oe2203"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"linux-sgx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.100-11.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"linux-sgx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.100-11.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"linux-sgx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-5.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-41.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-13.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-37.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-37.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.86.0-2.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.86.0-2.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.86.0-2.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.86.0-2.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.86.0-2.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.86.0-2.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.86.0-2.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.86.0-2.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.86.0-2.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-20.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-20.el7jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-20.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-20.el8jbcs"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.7::el7","package":"jws5-tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-11.redhat_11.el7jws"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.7::el7","package":"jws5-tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-11.redhat_11.el7jws"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.7::el8","package":"jws5-tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-11.redhat_11.el8jws"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.7::el8","package":"jws5-tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-11.redhat_11.el8jws"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.7::el9","package":"jws5-tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-11.redhat_11.el9jws"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:5.7::el9","package":"jws5-tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-11.redhat_11.el9jws"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.23-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.32-1.el8pc"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python39-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.32-1.el8pc"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.32-1.el8pc"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python39-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.32-1.el8pc"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"rubygem-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.21-1.el8pc"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python39-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.21-1.el8pc"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.21-1.el8pc"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python39-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.21-1.el8pc"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"yggdrasil-worker-forwarder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-1.el8sat"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.12::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el8sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.12::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el8sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.12::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.23-1.el8sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.12::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.23-1.el8sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.12::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.23-1.el8sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.12::el8","package":"rubygem-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-1.el8sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.12::el8","package":"rubygem-safemode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.8-1.el8sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.12::el8","package":"yggdrasil-worker-forwarder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-1.el8sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el7","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"tfm-rubygem-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-0.1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"rubygem-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-0.1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.11::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.11::el7","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.11::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.11::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.27-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"yggdrasil-worker-forwarder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-1.el7sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"yggdrasil-worker-forwarder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-1.el8sat"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el6","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el7","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el7sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el9","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el7","package":"yggdrasil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.3-1.el7sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el8","package":"yggdrasil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.3-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el9","package":"yggdrasil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.3-1.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el7","package":"foreman_ygg_worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el7sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el8","package":"foreman_ygg_worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_satellite_client:6::el9","package":"foreman_ygg_worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-kubeclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.26.0-3.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-pulp-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.16.0-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-pulp-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.16.0-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-pulp-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.16.0-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-pulp-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.16.0-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.14::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.14::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.9-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-future","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.3-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-future","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.3-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-future","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.3-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-future","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.3-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"yggdrasil-worker-forwarder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-activerecord","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.3-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.11.0-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.11.0-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.3-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.3-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-globalid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el8sat"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.21-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.21-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.21-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.21-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.31.0-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.31.0-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.31.0-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.31.0-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.32-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.32-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.32-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.32-1.el8pc"}]}],"bundled":32},{"source":"osv","ecosystem":"Rocky Linux:8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150100.14.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150100.14.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150100.14.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150100.14.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150100.14.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150100.14.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2j-60.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-3.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-150400.4.7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-150400.4.7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150000.4.74.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150000.4.74.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150000.4.74.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0i-150000.4.74.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2p-150000.3.56.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.27+esm10"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27","1.0.1f-1ubuntu2.27+esm1","1.0.1f-1ubuntu2.27+esm2","1.0.1f-1ubuntu2.27+esm3","1.0.1f-1ubuntu2.27+esm4","1.0.1f-1ubuntu2.27+esm5","1.0.1f-1ubuntu2.27+esm6","1.0.1f-1ubuntu2.27+esm7","1.0.1f-1ubuntu2.27+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.20+esm5"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12","1.0.2g-1ubuntu4.13","1.0.2g-1ubuntu4.14","1.0.2g-1ubuntu4.15","1.0.2g-1ubuntu4.16","1.0.2g-1ubuntu4.17","1.0.2g-1ubuntu4.18","1.0.2g-1ubuntu4.19","1.0.2g-1ubuntu4.20","1.0.2g-1ubuntu4.20+esm1","1.0.2g-1ubuntu4.20+esm2","1.0.2g-1ubuntu4.20+esm3","1.0.2g-1ubuntu4.20+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20150106.5c2d456b-2","0~20160104.c2a892d7-1","0~20160408.ffea0a2c-2","0~20160408.ffea0a2c-2ubuntu0.1","0~20160408.ffea0a2c-2ubuntu0.2","0~20160408.ffea0a2c-2ubuntu0.2+esm1","0~20160408.ffea0a2c-2ubuntu0.2+esm3","0~20160408.ffea0a2c-2ubuntu0.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.fips.4.20.3"}]}],"versions":["1.0.2g-1ubuntu4.fips.4.9.1","1.0.2g-1ubuntu4.fips.4.13.1","1.0.2g-1ubuntu4.fips.4.15.1","1.0.2g-1ubuntu4.fips.4.16.1","1.0.2g-1ubuntu4.fips.4.17.1","1.0.2g-1ubuntu4.fips.4.18.1","1.0.2g-1ubuntu4.fips.4.19.3","1.0.2g-1ubuntu4.fips.4.20.1","1.0.2g-1ubuntu4.fips.4.20.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2g-1ubuntu4.fips.4.6~ppa1","1.0.2g-1ubuntu4.fips.4.6~ppa2","1.0.2g-1ubuntu4.fips.4.6~ppa3","1.0.2g-1ubuntu4.fips.4.6","1.0.2g-1ubuntu4.fips.4.6.1","1.0.2g-1ubuntu4.fips.4.6.2","1.0.2g-1ubuntu4.fips.4.6.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.19"}]}],"versions":["1.0.2g-1ubuntu13","1.0.2g-1ubuntu14","1.0.2n-1ubuntu1","1.1.0g-2ubuntu1","1.1.0g-2ubuntu2","1.1.0g-2ubuntu3","1.1.0g-2ubuntu4","1.1.0g-2ubuntu4.1","1.1.0g-2ubuntu4.3","1.1.1-1ubuntu2.1~18.04.1","1.1.1-1ubuntu2.1~18.04.2","1.1.1-1ubuntu2.1~18.04.3","1.1.1-1ubuntu2.1~18.04.4","1.1.1-1ubuntu2.1~18.04.5","1.1.1-1ubuntu2.1~18.04.6","1.1.1-1ubuntu2.1~18.04.7","1.1.1-1ubuntu2.1~18.04.8","1.1.1-1ubuntu2.1~18.04.9","1.1.1-1ubuntu2.1~18.04.10","1.1.1-1ubuntu2.1~18.04.13","1.1.1-1ubuntu2.1~18.04.14","1.1.1-1ubuntu2.1~18.04.15","1.1.1-1ubuntu2.1~18.04.17"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.10"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5","1.0.2n-1ubuntu5.1","1.0.2n-1ubuntu5.2","1.0.2n-1ubuntu5.3","1.0.2n-1ubuntu5.4","1.0.2n-1ubuntu5.5","1.0.2n-1ubuntu5.6","1.0.2n-1ubuntu5.7","1.0.2n-1ubuntu5.8","1.0.2n-1ubuntu5.9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.fips.2.1~18.04.20"}]}],"versions":["1.1.1-1ubuntu2.fips.2.1~18.04.5.1","1.1.1-1ubuntu2.fips.2.1~18.04.6.1","1.1.1-1ubuntu2.fips.2.1~18.04.7.1","1.1.1-1ubuntu2.fips.2.1~18.04.9.1","1.1.1-1ubuntu2.fips.2.1~18.04.9.2","1.1.1-1ubuntu2.fips.2.1~18.04.9.3","1.1.1-1ubuntu2.fips.2.1~18.04.13.2","1.1.1-1ubuntu2.fips.2.1~18.04.15","1.1.1-1ubuntu2.fips.2.1~18.04.15.1","1.1.1-1ubuntu2.fips.2.1~18.04.15.2","1.1.1-1ubuntu2.fips.2.1~18.04.17"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-1ubuntu2.fips.2.1~18.04.3.1","1.1.1-1ubuntu2.fips.2.1~18.04.15.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.15"}]}],"versions":["1.1.1c-1ubuntu4","1.1.1d-2ubuntu3","1.1.1d-2ubuntu6","1.1.1f-1ubuntu1","1.1.1f-1ubuntu2","1.1.1f-1ubuntu2.1","1.1.1f-1ubuntu2.2","1.1.1f-1ubuntu2.3","1.1.1f-1ubuntu2.4","1.1.1f-1ubuntu2.5","1.1.1f-1ubuntu2.8","1.1.1f-1ubuntu2.9","1.1.1f-1ubuntu2.10","1.1.1f-1ubuntu2.11","1.1.1f-1ubuntu2.12","1.1.1f-1ubuntu2.13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.fips.16"}]}],"versions":["1.1.1f-1ubuntu2.fips.7","1.1.1f-1ubuntu2.fips.7.2","1.1.1f-1ubuntu2.fips.12","1.1.1f-1ubuntu2.fips.13","1.1.1f-1ubuntu2.fips.13.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1f-1ubuntu2.fips.2.8","1.1.1f-1ubuntu2.fips.7.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.9~dfsg-1ubuntu3.1"}]}],"versions":["12.22.5~dfsg-5ubuntu1","12.22.7~dfsg-2ubuntu1","12.22.7~dfsg-2ubuntu3","12.22.9~dfsg-1ubuntu2","12.22.9~dfsg-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-0ubuntu1.5"}]}],"versions":["1.1.1l-1ubuntu1","3.0.0-1ubuntu1","3.0.1-0ubuntu1","3.0.2-0ubuntu1","3.0.2-0ubuntu1.1","3.0.2-0ubuntu1.2","3.0.2-0ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.19"}]}],"versions":["1.0.2g-1ubuntu13","1.0.2g-1ubuntu14","1.0.2n-1ubuntu1","1.1.0g-2ubuntu1","1.1.0g-2ubuntu2","1.1.0g-2ubuntu3","1.1.0g-2ubuntu4","1.1.0g-2ubuntu4.1","1.1.0g-2ubuntu4.3","1.1.1-1ubuntu2.1~18.04.1","1.1.1-1ubuntu2.1~18.04.2","1.1.1-1ubuntu2.1~18.04.3","1.1.1-1ubuntu2.1~18.04.4","1.1.1-1ubuntu2.1~18.04.5","1.1.1-1ubuntu2.1~18.04.6","1.1.1-1ubuntu2.1~18.04.7","1.1.1-1ubuntu2.1~18.04.8","1.1.1-1ubuntu2.1~18.04.9","1.1.1-1ubuntu2.1~18.04.10","1.1.1-1ubuntu2.1~18.04.13","1.1.1-1ubuntu2.1~18.04.14","1.1.1-1ubuntu2.1~18.04.15","1.1.1-1ubuntu2.1~18.04.17"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.10"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5","1.0.2n-1ubuntu5.1","1.0.2n-1ubuntu5.2","1.0.2n-1ubuntu5.3","1.0.2n-1ubuntu5.4","1.0.2n-1ubuntu5.5","1.0.2n-1ubuntu5.6","1.0.2n-1ubuntu5.7","1.0.2n-1ubuntu5.8","1.0.2n-1ubuntu5.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.15"}]}],"versions":["1.1.1c-1ubuntu4","1.1.1d-2ubuntu3","1.1.1d-2ubuntu6","1.1.1f-1ubuntu1","1.1.1f-1ubuntu2","1.1.1f-1ubuntu2.1","1.1.1f-1ubuntu2.2","1.1.1f-1ubuntu2.3","1.1.1f-1ubuntu2.4","1.1.1f-1ubuntu2.5","1.1.1f-1ubuntu2.8","1.1.1f-1ubuntu2.9","1.1.1f-1ubuntu2.10","1.1.1f-1ubuntu2.11","1.1.1f-1ubuntu2.12","1.1.1f-1ubuntu2.13"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-0ubuntu1.5"}]}],"versions":["1.1.1l-1ubuntu1","3.0.0-1ubuntu1","3.0.1-0ubuntu1","3.0.2-0ubuntu1","3.0.2-0ubuntu1.1","3.0.2-0ubuntu1.2","3.0.2-0ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.20+esm5"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12","1.0.2g-1ubuntu4.13","1.0.2g-1ubuntu4.14","1.0.2g-1ubuntu4.15","1.0.2g-1ubuntu4.16","1.0.2g-1ubuntu4.17","1.0.2g-1ubuntu4.18","1.0.2g-1ubuntu4.19","1.0.2g-1ubuntu4.20","1.0.2g-1ubuntu4.20+esm1","1.0.2g-1ubuntu4.20+esm2","1.0.2g-1ubuntu4.20+esm3","1.0.2g-1ubuntu4.20+esm4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.22.9~dfsg-1ubuntu3.1"}]}],"versions":["12.22.5~dfsg-5ubuntu1","12.22.7~dfsg-2ubuntu1","12.22.7~dfsg-2ubuntu3","12.22.9~dfsg-1ubuntu2","12.22.9~dfsg-1ubuntu3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.27+esm10"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27","1.0.1f-1ubuntu2.27+esm1","1.0.1f-1ubuntu2.27+esm2","1.0.1f-1ubuntu2.27+esm3","1.0.1f-1ubuntu2.27+esm4","1.0.1f-1ubuntu2.27+esm5","1.0.1f-1ubuntu2.27+esm6","1.0.1f-1ubuntu2.27+esm7","1.0.1f-1ubuntu2.27+esm9"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1p-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_0_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2u-9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"grype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.92.1-1.1"}]}],"bundled":2}],"products":[{"vendor":"broadcom","product":"sannav"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"aff_8300_firmware"},{"vendor":"netapp","product":"aff_8700_firmware"},{"vendor":"netapp","product":"aff_a400_firmware"},{"vendor":"netapp","product":"bootstrap_os"},{"vendor":"netapp","product":"element_software"},{"vendor":"netapp","product":"fas_8300_firmware"},{"vendor":"netapp","product":"fas_8700_firmware"},{"vendor":"netapp","product":"fas_a400_firmware"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410c_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h610c_firmware"},{"vendor":"netapp","product":"h610s_firmware"},{"vendor":"netapp","product":"h615c_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"netapp","product":"hci_management_node"},{"vendor":"netapp","product":"ontap_antivirus_connector"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"netapp","product":"santricity_smi-s_provider"},{"vendor":"netapp","product":"smi-s_provider"},{"vendor":"netapp","product":"snapmanager"},{"vendor":"netapp","product":"solidfire"},{"vendor":"openssl","product":"openssl"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"},{"vendor":"siemens","product":"sinec_ins"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://www.openssl.org/news/secadv/20220621.txt","tags":["x_transferred","Vendor Advisory","web","article","report"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa","tags":["x_transferred","Patch","web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7","tags":["x_transferred","Patch","web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9","tags":["x_transferred","Patch","web"]},{"url":"https://www.debian.org/security/2022/dsa-5169","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220707-0008/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis","tags":["package","web"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/0","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-332410.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-146325.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2068","tags":["web","advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa","tags":["web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9","tags":["web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20220707-0008","tags":["web"]},{"url":"https://github.com/advisories/GHSA-xjxr-x4h8-946x","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-2068","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5818","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1292","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2068","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2097","tags":["report"]},{"url":"https://bugzilla.redhat.com/2081494","tags":["report"]},{"url":"https://bugzilla.redhat.com/2097310","tags":["report"]},{"url":"https://bugzilla.redhat.com/2104905","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-5818.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6224","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1343","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1473","tags":["report"]},{"url":"https://bugzilla.redhat.com/2087911","tags":["report"]},{"url":"https://bugzilla.redhat.com/2087913","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-6224.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-2068","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1657814965","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1657816312.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1657816793.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1657817606.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1658171496.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1719925589.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2068.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-2068","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0246.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30573","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5488-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1737","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1292","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0778","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1899","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104905","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5818.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1292","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20220503.txt","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2068","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2097","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20220705.txt","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2086554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2086866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2087234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2087911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2087913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2091938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2091977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2091994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2101346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2112978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115859","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2118388","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6224.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1343","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1473","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1473","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8840","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2099300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2099305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2099306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135416","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8840.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22721","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22721","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22721","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23943","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-23943","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26377","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26377","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26377","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-26377","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27781","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27781","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27781","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2022-27781.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28614","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28614","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28614","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-28614","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28615","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28615","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-28615","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30522","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30522","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-30522","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31813","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31813","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-31813","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32206","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32206","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32206","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2022-32206.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32207","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2022-32207.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32208","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32208","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2022-32208.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32221","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2022-32221.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-35252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-35252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42915","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42915","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42915","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2022-42915.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42916","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42916","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42916","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2022-42916.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8917","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8917.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5931","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.13/html/upgrading_and_updating_red_hat_satellite/index","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159672","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2192565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243296","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5931.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3874","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3874","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24439","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24439","tags":["advisory"]},{"url":"https://security.snyk.io/vuln/SNYK-PYTHON-GITPYTHON-3113858","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46648","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46648","tags":["advisory"]},{"url":"https://jvn.jp/en/jp/JVN16765254/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-47318","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-47318","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-47318","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0462","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0462","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0462","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227852","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3817","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20230731.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-31047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31047","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/may/03/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-36053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-36053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36053","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/jul/03/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44487","tags":["report"]},{"url":"https://go.dev/issue/63417","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2102","tags":["advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40267","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40267","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pr76-5cm5-w9cj","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/277","tags":["article"]},{"url":"https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5979","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.12/html/upgrading_and_updating_red_hat_satellite/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159291","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5979.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0118","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0118","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0118","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5980","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.11/html-single/upgrading_and_updating_red_hat_satellite/index#updating_satellite","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5980.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5982","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2217079","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5982.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41717","tags":["advisory"]},{"url":"https://go.dev/cl/455635","tags":["article"]},{"url":"https://go.dev/cl/455717","tags":["article"]},{"url":"https://go.dev/issue/56350","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2022-1144","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6818","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1922972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1949960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2088559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2090620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2096942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2103424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2116369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2117760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2122872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127134","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130871","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2145254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164800","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2171180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2176214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2176368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2176477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2176870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2192583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2192841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2193088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2193451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2207782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2210284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2210297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2217942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2220965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2220969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2220978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2226950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245930","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6818.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0759","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0759","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0759","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40899","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40899","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-44566","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-44566","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44566","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-44566.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-44570","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-44570","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44570","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/tree/master/gems/rack/CVE-2022-44570.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-44571","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-44571","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44571","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/tree/master/gems/rack/CVE-2022-44571.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-44572","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-44572","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44572","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2022-44572.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0119","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0119","tags":["advisory"]},{"url":"https://projects.theforeman.org/issues/35977","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1894","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1894","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1894","tags":["advisory"]},{"url":"https://www.puppet.com/security/cve/cve-2023-1894-puppet-server-redos","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22792","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22792","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22792","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22792.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22794","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22794","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2023-22794.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22795","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22795.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22796","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22796","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22796","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j6gc-792m-qgm2","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22799","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-23c2-gwp5-pxw9","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27530","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27530","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27530","tags":["advisory"]},{"url":"https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388","tags":["article"]},{"url":"https://github.com/rubysec/ruby-advisory-db/tree/master/gems/rack/CVE-2023-27530.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27539","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27539","tags":["advisory"]},{"url":"https://discuss.rubyonrails.org/t/cve-2023-27539-possible-denial-of-service-vulnerability-in-racks-header-parsing/82466","tags":["article"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2023-27539.yml","tags":["article"]},{"url":"https://rubysec.com/advisories/CVE-2023-27539/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29406","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29406","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29406","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/2q13H6LEEx0","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-30608","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-30608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30608","tags":["advisory"]},{"url":"https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32681","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32681","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32681","tags":["advisory"]},{"url":"https://github.com/psf/requests/security/advisories/GHSA-j8r2-6x86-q33q","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5818","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6818","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222179-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200550","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2068","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222180-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222181-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222182-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185637","tags":["report"]},{"url":"https://bugzilla.suse.com/1199166","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1292","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222197-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222251-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222251-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222306-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199167","tags":["report"]},{"url":"https://bugzilla.suse.com/1199168","tags":["report"]},{"url":"https://bugzilla.suse.com/1199169","tags":["report"]},{"url":"https://bugzilla.suse.com/1201099","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2097","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222308-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222309-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222321-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2068","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5488-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6457-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7018-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-1968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-23840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-0727","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3711","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-2068","title":"The c_rehash script allows command injection","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"published","published":"2022-06-21T14:45:20.597Z","modified":"2026-11-04T00:22:37.747Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-04T01:48:19.902761Z"}],"euvd":[{"id":"EUVD-2022-34360","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"published","published":"2022-06-21T14:45:20Z","modified":"2026-11-04T00:22:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-04T02:55:42.668573Z"}],"ghsa":[{"id":"GHSA-xjxr-x4h8-946x","title":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further...","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"published","published":"2022-06-22T00:00:54Z","modified":"2026-10-14T15:32:17Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:13:25.439244Z"}],"nvd":[{"id":"CVE-2022-2068","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"published","published":"2022-06-21T15:15:09.06Z","modified":"2026-11-03T22:17:09.593Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-04T00:47:54.173626Z"}],"osv":[{"id":"ALPINE-CVE-2022-2068","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"withdrawn","published":"2022-06-21T15:15:09.06Z","modified":"2026-07-14T08:03:29.759246691Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-9967","title":"CVE-2022-2068 affecting package openssl for versions less than 1.1.1k-17","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"published","published":"2022-06-21T15:15:09Z","modified":"2026-04-21T04:35:11.614939Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"BELL-CVE-2022-2068","title":"CVE-2022-2068 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:22.428456Z","modified":"2026-01-26T09:47:14.897824Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-2068","title":"The c_rehash script allows command injection","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"published","published":"2022-06-21T14:45:20.597Z","modified":"2026-11-11T13:22:10.141305925Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-11T11:06:20.592022Z"},{"id":"DEBIAN-CVE-2022-2068","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"published","published":"2022-06-21T15:15:09.06Z","modified":"2026-11-04T09:47:34.920059428Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T10:05:32.187009Z"},{"id":"JLSEC-2026-229","title":"In addition to the `c_rehash` shell command injection identified in CVE-2022-1292, further...","description":"In addition to the `c_rehash` shell command injection identified in CVE-2022-1292, further circumstances where the `c_rehash` script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the `c_rehash` script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"published","published":"2026-04-27T18:33:55.942Z","modified":"2026-07-25T18:24:07.325890348Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"critical"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2022-1737","title":"openssl security update","description":"OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.\r\n\r\nSecurity Fix(es):\r\n\r\nIn addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).(CVE-2022-2068)","status":"published","published":"2022-07-08T11:05:00Z","modified":"2026-08-18T01:16:46.314168807Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1898","title":"intel-sgx-ssl security update","description":"The Intel® Software Guard Extensions SSL (Intel® SGX SSL) cryptographic library is intended to provide cryptographic services for Intel® Software Guard Extensions (SGX) enclave applications. The Intel® SGX SSL cryptographic library is based on the underlying OpenSSL* Open Source project, providing a full-strength general purpose cryptography library. Supported OpenSSL version is 1.1.1l.\r\n\r\nSecurity Fix(es):\r\n\r\nThe c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).(CVE-2022-1292)\r\n\r\nIn addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).(CVE-2022-2068)\r\n\r\nAES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn\u0026apos;t written. In the special case of \u0026quot;in place\u0026quot; encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).(CVE-2022-2097)\r\n\r\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).(CVE-2022-0778)","status":"published","published":"2022-09-08T11:05:10Z","modified":"2026-08-18T01:17:18.584515051Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1899","title":"linux-sgx security update","description":"Intel(R) Software Guard Extensions (Intel(R) SGX) is an Intel technology for application developers seeking to protect select code and data from disclosure or modification.\r\n\r\nSecurity Fix(es):\r\n\r\nIn addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).(CVE-2022-2068)\r\n\r\nAES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn\u0026apos;t written. In the special case of \u0026quot;in place\u0026quot; encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).(CVE-2022-2097)","status":"published","published":"2022-09-08T11:05:11Z","modified":"2026-08-18T01:17:18.606264939Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:5818","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-30T02:23:39Z","modified":"2026-10-15T10:02:52Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6224","title":"Red Hat Security Advisory: openssl security and bug fix update","status":"published","published":"2024-09-30T02:23:48Z","modified":"2026-10-15T10:03:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:8840","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP1 security update","status":"published","published":"2024-09-30T02:24:07Z","modified":"2026-10-15T10:03:26Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8917","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.1 release and security update","status":"published","published":"2024-09-30T02:24:24Z","modified":"2026-10-15T10:03:27Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:5931","title":"Red Hat Security Advisory: Satellite 6.13.5 Async Security Update","status":"published","published":"2024-10-02T11:22:53Z","modified":"2026-10-20T10:01:57Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5979","title":"Red Hat Security Advisory: Satellite 6.12.5.2 Async Security Update","status":"published","published":"2024-10-02T11:23:56Z","modified":"2026-10-20T10:02:01Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5980","title":"Red Hat Security Advisory: Satellite 6.11.5.6 async security update","status":"published","published":"2024-10-02T11:24:07Z","modified":"2026-10-20T10:02:02Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5982","title":"Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update","status":"published","published":"2024-10-02T11:24:26Z","modified":"2026-10-20T10:02:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6818","title":"Red Hat Security Advisory: Satellite 6.14 security and bug fix update","status":"published","published":"2024-10-02T11:32:05Z","modified":"2026-10-20T10:02:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RLSA-2022:5818","title":"Moderate: openssl security update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: c_rehash script allows command injection (CVE-2022-1292)\n\n* openssl: the c_rehash script allows command injection (CVE-2022-2068)\n\n* openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-02T07:00:02Z","modified":"2026-02-04T09:30:11.239395Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-2068","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","status":"published","published":"2022-06-21T00:00:00Z","modified":"2026-10-05T19:20:09.936654141Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:52.391598Z"},{"id":"ALSA-2022:5818","title":"Moderate: openssl security update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\nSecurity Fix(es):\n* openssl: c_rehash script allows command injection (CVE-2022-1292)\n* openssl: the c_rehash script allows command injection (CVE-2022-2068)\n* openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-03T00:00:00Z","modified":"2026-10-29T11:01:47.86786532Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:6224","title":"Moderate: openssl security and bug fix update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\nSecurity Fix(es):\n* openssl: c_rehash script allows command injection (CVE-2022-1292)\n* openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS (CVE-2022-1343)\n* openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473)\n* openssl: the c_rehash script allows command injection (CVE-2022-2068)\n* openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\nBug Fix(es):\n* openssl occasionally sends internal error to gnutls when using FFDHE (BZ#2080323)\n* openssl req defaults to 3DES (BZ#2085499)\n* OpenSSL accepts custom elliptic curve parameters when p is large [almalinux-9] (BZ#2085508)\n* OpenSSL mustn't work with ECDSA with explicit curve parameters in FIPS mode (BZ#2085521)\n* openssl s_server -groups secp256k1 in FIPS fails because X25519/X448 (BZ#2086554)\n* Converting FIPS power-on self test to KAT (BZ#2086866)\n* Small RSA keys work for some operations in FIPS mode (BZ#2091938)\n* FIPS provider doesn't block RSA encryption for key transport (BZ#2091977)\n* OpenSSL testsuite certificates expired (BZ#2095696)\n* [IBM 9.1 HW OPT] POWER10 performance enhancements for cryptography: OpenSSL (BZ#2103044)\n* [FIPS lab review] self-test (BZ#2112978)\n* [FIPS lab review] DH tuning (BZ#2115856)\n* [FIPS lab review] EC tuning (BZ#2115857)\n* [FIPS lab review] RSA tuning (BZ#2115858)\n* [FIPS lab review] RAND tuning (BZ#2115859)\n* [FIPS lab review] zeroization (BZ#2115861)\n* [FIPS lab review] HKDF limitations (BZ#2118388)","status":"published","published":"2022-08-30T00:00:00Z","modified":"2026-10-29T11:31:13.957033679Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2022-1657814965","title":"Fix CVE(s): CVE-2022-1473, CVE-2022-1292, CVE-2022-2068","description":"\n   * SECURITY REGRESSION: Invalid fix for CVE-2022-1473\n     - debian/patches/CVE-2022-1473.patch: removing unnecessary patch since\n       this version is actually not affected\n   * SECURITY UPDATE: c_rehash script allows command injection\n     - debian/patches/CVE-2022-1292.patch: switch to upstream patch, and\n       apply it before c_rehash-compat.patch\n     - debian/patches/CVE-2022-2068.patch: fix file operations in\n       tools/c_rehash.in\n     - debian/patches/c_rehash-compat.patch: updated patch to apply after\n       the security updates\n     - CVE-2022-2068","status":"published","published":"2022-07-14T16:09:25Z","modified":"2026-06-04T10:04:14.704913629Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1657816312","title":"Fixed CVEs in openssl: CVE-2022-2068, CVE-2022-1292","description":"- CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent\n  command injection\n- CVE-2022-2068: c_rehash: Fix file operations to prevent command injection","status":"published","published":"2022-07-14T16:31:52Z","modified":"2026-10-21T10:48:01.3931489Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1657816793","title":"Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068","description":"- CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent\n  command injection\n- CVE-2022-2068: c_rehash: Fix file operations to prevent command injection\n- Update expired SCT certificates","status":"published","published":"2022-07-14T16:39:53Z","modified":"2026-06-01T00:33:20.258219871Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1657817606","title":"Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068","description":"- CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent\n  command injection\n- CVE-2022-2068: c_rehash: Fix file operations to prevent command injection","status":"published","published":"2022-07-14T16:53:26Z","modified":"2026-06-01T00:33:15.673580284Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1658171496","title":"Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068","description":"- CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent\n  command injection\n- CVE-2022-2068: c_rehash: Fix file operations to prevent command injection\n- Update expired SCT certificates","status":"published","published":"2022-07-18T19:11:36Z","modified":"2026-06-01T00:33:13.533372901Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2024-1719925589","title":"openssl: Fix of 2 CVEs","description":"- CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent\n  command injection\n- CVE-2022-2068: c_rehash: Fix file operations to prevent command injection\n- Update expired smime certificates\n- Add testing using old certificates (sha1) to have both types of\n  certificates (sha1, sha256) checked with S/MIME","status":"published","published":"2024-07-02T13:06:32Z","modified":"2026-06-01T00:33:17.485072567Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"DSA-5169-1","title":"openssl - security update","status":"published","published":"2022-06-26T00:00:00Z","modified":"2026-03-09T02:09:37.692763Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0246","title":"Updated openssl packages fix security vulnerability","description":"The c_rehash script allows command injection. (CVE-2022-2068)\n","status":"published","published":"2022-06-30T21:31:09Z","modified":"2026-04-16T04:44:17.724013557Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12159-1","title":"libopenssl-1_1-devel-1.1.1p-1.1 on GA media","description":"These are all security issues fixed in the libopenssl-1_1-devel-1.1.1p-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:30:51.85224Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:12178-1","title":"libopenssl-1_0_0-devel-1.0.2u-9.1 on GA media","description":"These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-9.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:13:34.853723Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2025:15136-1","title":"grype-0.92.1-1.1 on GA media","description":"These are all security issues fixed in the grype-0.92.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-20T00:00:00Z","modified":"2025-05-22T10:59:07.634288Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"RLSA-2023:6818","title":"Important: Satellite 6.14 security and bug fix update","description":"Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based\ninfrastructure. It allows for provisioning, remote management, and\nmonitoring of multiple Linux deployments with a single centralized tool.\n\nSecurity Fix(es):\n\n* golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)\n\n* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)\n\n* GitPython: Insecure non-multi options in clone and clone_from is not blocked (CVE-2023-40267)\n\n* kubeclient: kubeconfig parsing error can lead to MITM attacks (CVE-2022-0759)\n\n* foreman: OS command injection via ct_command and fcct_command (CVE-2022-3874)\n\n* ruby-git: code injection vulnerability (CVE-2022-46648)\n\n* ruby-git: code injection vulnerability (CVE-2022-47318)\n\n* Foreman: Arbitrary code execution through templates (CVE-2023-0118)\n\n* rubygem-activerecord: SQL Injection (CVE-2023-22794)\n\n* openssl: c_rehash script allows command injection (CVE-2022-1292)\n\n* openssl: the c_rehash script allows command injection (CVE-2022-2068)\n\n* Pulp:Tokens stored in plaintext (CVE-2022-3644)\n\n* satellite: Blind SSRF via Referer header (CVE-2022-4130)\n\n* python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server (CVE-2022-40899)\n\n* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n\n* rubygem-activerecord: Denial of Service (CVE-2022-44566)\n\n* rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44570)\n\n* rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44571)\n\n* rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44572)\n\n* Foreman: Stored cross-site scripting in host tab (CVE-2023-0119)\n\n* puppet: Puppet Server ReDoS (CVE-2023-1894)\n\n* rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22792)\n\n* rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22795)\n\n* rubygem-activesupport: Regular Expression Denial of Service (CVE-2023-22796)\n\n* rubygem-globalid: ReDoS vulnerability (CVE-2023-22799)\n\n* rubygem-rack: Denial of service in Multipart MIME parsing (CVE-2023-27530)\n\n* rubygem-rack: denial of service in header parsing (CVE-2023-27539)\n\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\n* sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) (CVE-2023-30608)\n\n* python-django: Potential bypass of validation when uploading multiple files using one form field (CVE-2023-31047)\n\n* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)\n\n* python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator (CVE-2023-36053)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nThis update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document linked to in the References section.","status":"published","published":"2023-11-11T22:58:57.641828Z","modified":"2026-02-05T03:30:08.284301Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2022:2179-1","title":"Security update for openssl","description":"This update for openssl fixes the following issues:\n\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n","status":"published","published":"2022-06-24T12:05:38Z","modified":"2026-02-04T02:20:38.0061Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2180-1","title":"Security update for openssl","description":"This update for openssl fixes the following issues:\n\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n","status":"published","published":"2022-06-24T12:28:08Z","modified":"2026-02-04T04:23:30.862335Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2181-1","title":"Security update for openssl","description":"This update for openssl fixes the following issues:\n\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n","status":"published","published":"2022-06-24T12:29:05Z","modified":"2026-02-04T03:35:41.942327Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2182-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\t  \n- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n","status":"published","published":"2022-06-24T12:32:47Z","modified":"2026-02-04T02:54:39.943465Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2197-1","title":"Security update for openssl-1_0_0","description":"This update for openssl-1_0_0 fixes the following issues:\n\n- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n","status":"published","published":"2022-06-28T04:04:11Z","modified":"2026-02-04T03:23:33.276325Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2251-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\t  \n- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n","status":"published","published":"2022-07-04T07:52:42Z","modified":"2026-02-04T03:45:48.539973Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2251-2","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\t  \n- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n","status":"published","published":"2022-07-04T07:53:29Z","modified":"2026-02-04T03:15:44.465839Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2306-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n- CVE-2022-1292: Properly sanitise shell metacharacters in c_rehash script. (bsc#1199166) \n- CVE-2022-1343: Fixed incorrect signature verification in OCSP_basic_verify (bsc#1199167).\n- CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).\n- CVE-2022-1434: Fixed incorrect MAC key used in the RC4-MD5 ciphersuite (bsc#1199168).\n- CVE-2022-1473: Fixed resource leakage when decoding certificates and keys (bsc#1199169).\n","status":"published","published":"2022-07-06T11:49:35Z","modified":"2025-05-02T04:32:26.510207Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2308-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\n- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n- CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).\n","status":"published","published":"2022-07-06T12:15:24Z","modified":"2026-02-04T04:29:22.675427Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2309-1","title":"Security update for openssl","description":"This update for openssl fixes the following issues:\n\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n- CVE-2022-2097: Fixed partial missing encryption in AES OCB mode. (bsc#1201099)\n","status":"published","published":"2022-07-06T12:15:47Z","modified":"2026-02-04T04:00:13.950715Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2321-1","title":"Security update for openssl-1_0_0","description":"This update for openssl-1_0_0 fixes the following issues:\n\n- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).\n- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)\n","status":"published","published":"2022-07-07T09:02:29Z","modified":"2026-02-04T02:15:53.682831Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5488-1","title":"openssl, openssl1.0 vulnerability","description":"Chancen and Daniel Fiala discovered that OpenSSL incorrectly handled the\nc_rehash script. A local attacker could possibly use this issue to execute\narbitrary commands when c_rehash is run.\n","status":"published","published":"2022-06-21T14:36:21Z","modified":"2026-04-27T16:12:02.832903Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5488-2","title":"openssl vulnerability","description":"USN-5488-1 fixed vulnerabilities in OpenSSL. This update provides the\ncorresponding updates for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Chancen and Daniel Fiala discovered that OpenSSL incorrectly handled the\n c_rehash script. A local attacker could possibly use this issue to execute\n arbitrary commands when c_rehash is run.\n","status":"published","published":"2022-07-06T16:52:06Z","modified":"2026-06-25T13:31:13.899155385Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-6457-1","title":"nodejs vulnerabilities","description":"Tavis Ormandy discovered that Node.js incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2022-0778) \n\nElison Niven discovered that Node.js incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2022-1292)\n\nChancen and Daniel Fiala discovered that Node.js incorrectly handled certain\ninputs. If a user or an automated system were tricked into opening a specially\ncrafted input file, a remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2022-2068)\n\nAlex Chernyakhovsky discovered that Node.js incorrectly handled certain\ninputs. If a user or an automated system were tricked into opening a specially\ncrafted input file, a remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2022-2097)\n","status":"published","published":"2023-10-30T10:06:58Z","modified":"2026-05-25T09:30:06.310034235Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-7018-1","title":"openssl vulnerabilities","description":"Robert Merget, Marcus Brinkmann, Nimrod Aviram, and Juraj Somorovsky\ndiscovered that certain Diffie-Hellman ciphersuites in the TLS\nspecification and implemented by OpenSSL contained a flaw. A remote\nattacker could possibly use this issue to eavesdrop on encrypted\ncommunications. This was fixed in this update by removing the insecure\nciphersuites from OpenSSL. (CVE-2020-1968)\n\nPaul Kehrer discovered that OpenSSL incorrectly handled certain input\nlengths in EVP functions. A remote attacker could possibly use this issue\nto cause OpenSSL to crash, resulting in a denial of service.\n(CVE-2021-23840)\n\nElison Niven discovered that OpenSSL incorrectly handled the c_rehash\nscript. A local attacker could possibly use this issue to execute arbitrary\ncommands when c_rehash is run. (CVE-2022-1292)\n\nChancen and Daniel Fiala discovered that OpenSSL incorrectly handled the\nc_rehash script. A local attacker could possibly use this issue to execute\narbitrary commands when c_rehash is run. (CVE-2022-2068)\n\nIt was discovered that OpenSSL incorrectly handled excessively large\nDiffie-Hellman parameters. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2023-3446)\n\nBahaa Naamneh discovered that OpenSSL incorrectly handled certain malformed\nPKCS12 files. A remote attacker could possibly use this issue to cause\nOpenSSL to crash, resulting in a denial of service. (CVE-2024-0727)\n","status":"published","published":"2024-09-18T00:38:46Z","modified":"2026-06-29T13:51:16.693258405Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}