{"id":"CVE-2024-13176","aliases":["ALPINE-CVE-2024-13176","ALSA-2025:15699","ALSA-2025:16046","AZL-55889","AZL-55894","AZL-56010","AZL-78537","BELL-CVE-2024-13176","CLSA-2025-1751142817","CLSA-2025-1751888871","CLSA-2025-1751889283","CLSA-2025-1759865335","CLSA-2026-1780682107","CLSA-2026-1780682108","CLSA-2026-1780683040","CLSA-2026-1785400004","DEBIAN-CVE-2024-13176","DLA-4176-1","EUVD-2024-51400","GHSA-r9fv-h47r-823f","JLSEC-2026-248","MGASA-2025-0025","MGASA-2025-0101","MGASA-2025-0210","OESA-2025-1190","OESA-2025-1191","OESA-2025-1192","OESA-2025-1193","OESA-2025-1194","OESA-2025-1287","OESA-2025-1288","RLSA-2025:15699","SUSE-SU-2025:02042-1","SUSE-SU-2025:0345-1","SUSE-SU-2025:0349-1","SUSE-SU-2025:0356-1","SUSE-SU-2025:0387-1","SUSE-SU-2025:0388-1","SUSE-SU-2025:0390-1","SUSE-SU-2025:0430-1","SUSE-SU-2025:0613-1","SUSE-SU-2025:0613-2","SUSE-SU-2025:0613-3","SUSE-SU-2025:20233-1","SUSE-SU-2025:20406-1","SUSE-SU-2025:20464-1","SUSE-SU-2026:3835-1","UBUNTU-CVE-2024-13176","USN-7278-1","USN-7894-1","openSUSE-SU-2025:14696-1"],"status":"published","title":"Timing side-channel in ECDSA signature computation","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00749,"percentile":0.55364,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-385"],"published":"2025-01-20T13:29:57Z","modified":"2026-11-10T09:30:02Z","exploits":[{"source":"pocgithub","id":"Haomin-Yu/cve-2024-13176-timing-analysis","title":"Haomin-Yu/cve-2024-13176-timing-analysis","date":"2026-08-19","url":"https://github.com/Haomin-Yu/cve-2024-13176-timing-analysis"}],"fixes":[{"ecosystem":"Alpine:v3.17","package":"openssl","fixed_in":["3.0.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openssl","fixed_in":["3.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openssl","fixed_in":["3.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openssl","fixed_in":["3.3.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openssl","fixed_in":["3.3.2-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openssl","fixed_in":["3.3.2-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openssl","fixed_in":["3.3.2-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openssl","fixed_in":["3.3.2-r5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"openssl","fixed_in":["3.3.3-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"edk2","fixed_in":["20240524git3e722403cd16-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openssl","fixed_in":["1.1.1k-36"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openssl","fixed_in":["3.0.15-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openssl","fixed_in":["3.3.2-r5"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openssl","fixed_in":["3.0.15-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openssl","fixed_in":["3.3.2-r5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl-devel","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl-libs","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl-perl","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssl-static","fixed_in":["1:1.1.1g-15.el8.4.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl","fixed_in":["1:1.1.1k-12.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl-devel","fixed_in":["1:1.1.1k-12.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl-libs","fixed_in":["1:1.1.1k-12.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl-perl","fixed_in":["1:1.1.1k-12.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl-static","fixed_in":["1:1.1.1k-12.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl-devel","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl-libs","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl-perl","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssl-static","fixed_in":["1:1.1.1k-5.el8.5.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssl","fixed_in":["1:3.0.7-20.el9_2.tuxcare.1.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssl-devel","fixed_in":["1:3.0.7-20.el9_2.tuxcare.1.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssl-libs","fixed_in":["1:3.0.7-20.el9_2.tuxcare.1.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssl-perl","fixed_in":["1:3.0.7-20.el9_2.tuxcare.1.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssl","fixed_in":["1:1.0.2k-26.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssl-devel","fixed_in":["1:1.0.2k-26.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssl-libs","fixed_in":["1:1.0.2k-26.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssl-perl","fixed_in":["1:1.0.2k-26.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssl-static","fixed_in":["1:1.0.2k-26.el7_9.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"edk2","fixed_in":["2025.02-8+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"edk2","fixed_in":["2025.02-9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openssl","fixed_in":["3.0.16-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["3.4.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["3.4.1-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"openssl","fixed_in":["1.1.1w-0+deb11u3"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenSSL_jll","fixed_in":["3.0.16+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"Openresty_jll","fixed_in":["1.29.203+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"openssl","fixed_in":["3.0.15-1.2.mga9"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"quictls","fixed_in":["3.0.15-1.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"compat-openssl11","fixed_in":["1.1.1m-13.oe2403sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openssl-1_1","fixed_in":["1.1.1l-150500.17.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openssl-1_1","fixed_in":["1.1.1l-150500.17.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openssl-1_1","fixed_in":["1.1.1l-150500.17.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openssl-1_1","fixed_in":["1.1.1l-150500.17.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openssl-1_1","fixed_in":["1.1.1l-150500.17.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openssl-1_1","fixed_in":["1.1.1l-150400.7.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openssl-1_1","fixed_in":["1.1.1l-150400.7.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssl-1_1","fixed_in":["1.1.1l-150400.7.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssl-1_1","fixed_in":["1.1.1l-150400.7.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssl-1_1","fixed_in":["1.1.1l-150400.7.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssl-1_1","fixed_in":["1.1.1l-150400.7.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"openssl-1_1","fixed_in":["1.1.1l-150400.7.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"openssl-1_1","fixed_in":["1.1.1l-150400.7.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssl-1_1","fixed_in":["1.1.1d-150200.11.100.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssl-1_1","fixed_in":["1.1.1d-150200.11.100.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssl-1_1","fixed_in":["1.1.1d-150200.11.100.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openssl-1_1","fixed_in":["1.1.1d-150200.11.100.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openssl-1_1","fixed_in":["1.1.1d-150200.11.100.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssl-1_1","fixed_in":["1.1.1d-150200.11.100.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openssl-3","fixed_in":["3.0.8-150500.5.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openssl-3","fixed_in":["3.0.8-150500.5.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openssl-3","fixed_in":["3.0.8-150500.5.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openssl-3","fixed_in":["3.0.8-150500.5.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openssl-3","fixed_in":["3.0.8-150400.4.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openssl-3","fixed_in":["3.0.8-150400.4.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssl-3","fixed_in":["3.0.8-150400.4.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssl-3","fixed_in":["3.0.8-150400.4.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssl-3","fixed_in":["3.0.8-150400.4.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssl-3","fixed_in":["3.0.8-150400.4.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"openssl-3","fixed_in":["3.0.8-150400.4.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"openssl-3","fixed_in":["3.0.8-150400.4.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"openssl-1_1","fixed_in":["1.1.1d-2.116.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"openssl-1_1","fixed_in":["1.1.1d-2.116.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"openssl-3","fixed_in":["3.1.4-150600.5.24.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"openssl-3","fixed_in":["3.1.4-150600.5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"openssl-1_1","fixed_in":["1.1.1w-150600.5.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"openssl-1_1","fixed_in":["1.1.1w-150600.5.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"openssl-1_1","fixed_in":["1.1.1w-150600.5.12.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"openssl-1_1","fixed_in":["1.1.1w-150600.5.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Certifications 15 SP7","package":"openssl-1_1","fixed_in":["1.1.1w-150600.5.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"openssl-3","fixed_in":["3.1.4-slfo.1.1_4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"openssl-3","fixed_in":["3.1.4-9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openssl","fixed_in":["1.1.1f-1ubuntu2.24"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssl","fixed_in":["1.1.1f-1ubuntu2.fips.24"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"edk2","fixed_in":["2022.02-3ubuntu0.22.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openssl","fixed_in":["3.0.2-0ubuntu1.19"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"openssl","fixed_in":["3.0.2-0ubuntu1.19+Fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"edk2","fixed_in":["2024.02-2ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openssl","fixed_in":["3.0.13-0ubuntu3.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"openssl-fips","fixed_in":["3.0.13-0ubuntu3.6+Fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"edk2","fixed_in":["2025.02-8ubuntu3"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"edk2","fixed_in":["2025.02-8ubuntu3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openssl-3","fixed_in":["3.2.3-4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.0.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.3.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.3.2-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.3.2-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.3.2-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2"},{"fixed":"3.3.2-r5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"mysql-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.14-1.el10_0"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:10","package":"mysql8.4-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-2.el10_0"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:10","package":"mysql8.4-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-2.el10_0"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:10","package":"mysql8.4-test-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-2.el10_0"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mecab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-3.module_el9.6.0+152+8cbce00c.4"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mecab-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-3.module_el9.6.0+152+8cbce00c.4"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mecab-ipadic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0.20070801-24.module_el9.6.0+152+8cbce00c"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mecab-ipadic-EUCJP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0.20070801-24.module_el9.6.0+152+8cbce00c"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-1.module_el9.6.0+180+a4e757e5"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-1.module_el9.6.0+180+a4e757e5"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-1.module_el9.6.0+180+a4e757e5"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-1.module_el9.6.0+180+a4e757e5"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-1.module_el9.6.0+180+a4e757e5"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-1.module_el9.6.0+180+a4e757e5"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-1.module_el9.6.0+180+a4e757e5"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-test-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.6-1.module_el9.6.0+180+a4e757e5"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rapidjson-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-19.module_el9.6.0+152+8cbce00c"}]}],"bundled":53},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rapidjson-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-19.module_el9.6.0+152+8cbce00c"}]}],"bundled":53},{"source":"osv","ecosystem":"Azure Linux:3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240524git3e722403cd16-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1k-36"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openssl-fips-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.1.2-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.8-r4"},{"fixed":"3.0.15-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1-r1"},{"fixed":"3.3.2-r5"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.8-r4"},{"fixed":"3.0.15-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1-r1"},{"fixed":"3.3.2-r5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-15.el8.4.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-12.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-12.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-12.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-12.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-12.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-5.el8.5.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.7-20.el9_2.tuxcare.1.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.7-20.el9_2.tuxcare.1.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.7-20.el9_2.tuxcare.1.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.7-20.el9_2.tuxcare.1.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssl11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssl11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssl11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssl11-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssl11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssl11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssl11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssl11-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl11-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-7.el7.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2k-26.el7_9.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2022.11-6","2022.11-6+deb12u1","2022.11-6+deb12u2","2023.02-1","2023.02-2","2023.05-1","2023.05-2","2023.08-1","2023.11-1","2023.11-2","2023.11-3","2023.11-4","2023.11-5","2023.11-6","2023.11-7","2023.11-8","2024.02-1","2024.02-2","2024.05-1","2024.05-2","2024.08-1","2024.08-2","2024.08-3","2024.08-4","2024.11-1","2024.11-2","2024.11-3","2024.11-4","2024.11-5","2025.02-1","2025.02-10","2025.02-2","2025.02-3","2025.02-4","2025.02-5","2025.02-6","2025.02-7","2025.02-8","2025.02-9","2025.05-1","2025.05-2","2025.08.01-1","2025.08.01-2","2025.08.01-3","2025.08.01-4","2025.08.01-5","2025.08.01-6","2025.11-1","2025.11-2","2025.11-3","2025.11-4","2025.11-5","2026.02-1","2026.02-2","2026.02-3","2026.05-1","2026.05-2","2026.05-3","2026.08+ds-1","2026.08+ds-2","2026.08+ds-3"]},{"source":"osv","ecosystem":"Debian:13","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.02-8+deb13u1"}]}],"versions":["2025.02-8"]},{"source":"osv","ecosystem":"Debian:14","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.02-9"}]}],"versions":["2025.02-8"]},{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.16-1~deb12u1"}]}],"versions":["3.0.10-1","3.0.10-1~deb12u1","3.0.11-1","3.0.11-1~deb12u1","3.0.11-1~deb12u2","3.0.12-1","3.0.12-2","3.0.13-1~deb12u1","3.0.13-1~deb12u2","3.0.14-1~deb12u1","3.0.14-1~deb12u2","3.0.15-1~deb12u1","3.0.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1w-0+deb11u3"}]}],"versions":["1.1.1k-1","1.1.1k-1+deb11u1","1.1.1k-1+deb11u2","1.1.1l-1","1.1.1m-0+deb11u1","1.1.1m-1","1.1.1n-0+deb11u1","1.1.1n-0+deb11u2","1.1.1n-0+deb11u3","1.1.1n-0+deb11u4","1.1.1n-0+deb11u5","1.1.1n-0+deb11u6","1.1.1n-1","1.1.1o-1","1.1.1v-0~deb11u1","1.1.1w-0+deb11u1","1.1.1w-0+deb11u2","1.1.1w-0~deb11u1"]},{"source":"osv","ecosystem":"Julia","package":"OpenSSL_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.0.16+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"Openresty_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.29.203+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.15-1.2.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"quictls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.15-1.2.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"quictls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.17-1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-23.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-17.oe2403"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-18.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202002-27.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-24.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"compat-openssl11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1m-13.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"compat-openssl11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1m-13.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"mysql8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.6-2.el10_0"}]}],"bundled":53},{"source":"osv","ecosystem":"Rocky Linux:10","package":"mysql-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-1.el10_0"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150700.5.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150500.17.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150500.17.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150500.17.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150500.17.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150500.17.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-150400.7.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.100.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.100.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.100.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.100.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.100.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-150200.11.100.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150500.5.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150500.5.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150500.5.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150500.5.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150400.4.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150400.4.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150400.4.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150400.4.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150400.4.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150400.4.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150400.4.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-150400.4.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.116.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1d-2.116.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-150600.5.24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-150600.5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1w-150600.5.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1w-150600.5.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1w-150600.5.12.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1w-150600.5.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Certifications 15 SP7","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1w-150600.5.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Certifications 15 SP7","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1w-150600.5.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-slfo.1.1_4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-150700.3.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-150700.5.45.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP7","package":"nodejs24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.18.1-150700.15.18.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27","1.0.1f-1ubuntu2.27+esm1","1.0.1f-1ubuntu2.27+esm2","1.0.1f-1ubuntu2.27+esm3","1.0.1f-1ubuntu2.27+esm4","1.0.1f-1ubuntu2.27+esm5","1.0.1f-1ubuntu2.27+esm6","1.0.1f-1ubuntu2.27+esm7","1.0.1f-1ubuntu2.27+esm9","1.0.1f-1ubuntu2.27+esm10","1.0.1f-1ubuntu2.27+esm11","1.0.1f-1ubuntu2.27+esm12","1.0.1f-1ubuntu2.27+esm13","1.0.1f-1ubuntu2.27+esm14","1.0.1f-1ubuntu2.27+esm16","1.0.1f-1ubuntu2.27+esm17"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12","1.0.2g-1ubuntu4.13","1.0.2g-1ubuntu4.14","1.0.2g-1ubuntu4.15","1.0.2g-1ubuntu4.16","1.0.2g-1ubuntu4.17","1.0.2g-1ubuntu4.18","1.0.2g-1ubuntu4.19","1.0.2g-1ubuntu4.20","1.0.2g-1ubuntu4.20+esm1","1.0.2g-1ubuntu4.20+esm2","1.0.2g-1ubuntu4.20+esm3","1.0.2g-1ubuntu4.20+esm4","1.0.2g-1ubuntu4.20+esm5","1.0.2g-1ubuntu4.20+esm6","1.0.2g-1ubuntu4.20+esm7","1.0.2g-1ubuntu4.20+esm9","1.0.2g-1ubuntu4.20+esm10","1.0.2g-1ubuntu4.20+esm11","1.0.2g-1ubuntu4.20+esm12","1.0.2g-1ubuntu4.20+esm13","1.0.2g-1ubuntu4.20+esm14","1.0.2g-1ubuntu4.20+esm15","1.0.2g-1ubuntu4.20+esm16","1.0.2g-1ubuntu4.20+esm18","1.0.2g-1ubuntu4.20+esm19"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20150106.5c2d456b-2","0~20160104.c2a892d7-1","0~20160408.ffea0a2c-2","0~20160408.ffea0a2c-2ubuntu0.1","0~20160408.ffea0a2c-2ubuntu0.2","0~20160408.ffea0a2c-2ubuntu0.2+esm1","0~20160408.ffea0a2c-2ubuntu0.2+esm3","0~20160408.ffea0a2c-2ubuntu0.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2g-1ubuntu4.fips.4.9.1","1.0.2g-1ubuntu4.fips.4.13.1","1.0.2g-1ubuntu4.fips.4.15.1","1.0.2g-1ubuntu4.fips.4.16.1","1.0.2g-1ubuntu4.fips.4.17.1","1.0.2g-1ubuntu4.fips.4.18.1","1.0.2g-1ubuntu4.fips.4.19.3","1.0.2g-1ubuntu4.fips.4.20.1","1.0.2g-1ubuntu4.fips.4.20.2","1.0.2g-1ubuntu4.fips.4.20.3","1.0.2g-1ubuntu4.fips.4.20.6","1.0.2g-1ubuntu4.fips.4.20.7","1.0.2g-1ubuntu4.fips.4.20.9","1.0.2g-1ubuntu4.fips.4.20.10","1.0.2g-1ubuntu4.fips.4.20.11","1.0.2g-1ubuntu4.fips.4.20.12","1.0.2g-1ubuntu4.fips.4.20.13","1.0.2g-1ubuntu4.fips.4.20.14","1.0.2g-1ubuntu4.fips.4.20.15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2g-1ubuntu4.fips.4.6~ppa1","1.0.2g-1ubuntu4.fips.4.6~ppa2","1.0.2g-1ubuntu4.fips.4.6~ppa3","1.0.2g-1ubuntu4.fips.4.6","1.0.2g-1ubuntu4.fips.4.6.1","1.0.2g-1ubuntu4.fips.4.6.2","1.0.2g-1ubuntu4.fips.4.6.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2g-1ubuntu13","1.0.2g-1ubuntu14","1.0.2n-1ubuntu1","1.1.0g-2ubuntu1","1.1.0g-2ubuntu2","1.1.0g-2ubuntu3","1.1.0g-2ubuntu4","1.1.0g-2ubuntu4.1","1.1.0g-2ubuntu4.3","1.1.1-1ubuntu2.1~18.04.1","1.1.1-1ubuntu2.1~18.04.2","1.1.1-1ubuntu2.1~18.04.3","1.1.1-1ubuntu2.1~18.04.4","1.1.1-1ubuntu2.1~18.04.5","1.1.1-1ubuntu2.1~18.04.6","1.1.1-1ubuntu2.1~18.04.7","1.1.1-1ubuntu2.1~18.04.8","1.1.1-1ubuntu2.1~18.04.9","1.1.1-1ubuntu2.1~18.04.10","1.1.1-1ubuntu2.1~18.04.13","1.1.1-1ubuntu2.1~18.04.14","1.1.1-1ubuntu2.1~18.04.15","1.1.1-1ubuntu2.1~18.04.17","1.1.1-1ubuntu2.1~18.04.19","1.1.1-1ubuntu2.1~18.04.20","1.1.1-1ubuntu2.1~18.04.21","1.1.1-1ubuntu2.1~18.04.22","1.1.1-1ubuntu2.1~18.04.23","1.1.1-1ubuntu2.1~18.04.23+esm1","1.1.1-1ubuntu2.1~18.04.23+esm3","1.1.1-1ubuntu2.1~18.04.23+esm4","1.1.1-1ubuntu2.1~18.04.23+esm5","1.1.1-1ubuntu2.1~18.04.23+esm6","1.1.1-1ubuntu2.1~18.04.23+esm7","1.1.1-1ubuntu2.1~18.04.23+esm8","1.1.1-1ubuntu2.1~18.04.23+esm9","1.1.1-1ubuntu2.1~18.04.23+esm10","1.1.1-1ubuntu2.1~18.04.23+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5","1.0.2n-1ubuntu5.1","1.0.2n-1ubuntu5.2","1.0.2n-1ubuntu5.3","1.0.2n-1ubuntu5.4","1.0.2n-1ubuntu5.5","1.0.2n-1ubuntu5.6","1.0.2n-1ubuntu5.7","1.0.2n-1ubuntu5.8","1.0.2n-1ubuntu5.9","1.0.2n-1ubuntu5.10","1.0.2n-1ubuntu5.11","1.0.2n-1ubuntu5.12","1.0.2n-1ubuntu5.13","1.0.2n-1ubuntu5.13+esm1","1.0.2n-1ubuntu5.13+esm2","1.0.2n-1ubuntu5.13+esm3","1.0.2n-1ubuntu5.13+esm4","1.0.2n-1ubuntu5.13+esm5","1.0.2n-1ubuntu5.13+esm6","1.0.2n-1ubuntu5.13+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20170911.5dfba97c-1","0~20171010.234dbcef-1","0~20171027.76fd5a66-1","0~20171205.a9212288-1","0~20180105.0bc94c74-1","0~20180205.c0d9813c-1","0~20180205.c0d9813c-2","0~20180205.c0d9813c-2ubuntu0.1","0~20180205.c0d9813c-2ubuntu0.2","0~20180205.c0d9813c-2ubuntu0.3","0~20180205.c0d9813c-2ubuntu0.3+esm1","0~20180205.c0d9813c-2ubuntu0.3+esm2","0~20180205.c0d9813c-2ubuntu0.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-1ubuntu2.fips.2.1~18.04.5.1","1.1.1-1ubuntu2.fips.2.1~18.04.6.1","1.1.1-1ubuntu2.fips.2.1~18.04.7.1","1.1.1-1ubuntu2.fips.2.1~18.04.9.1","1.1.1-1ubuntu2.fips.2.1~18.04.9.2","1.1.1-1ubuntu2.fips.2.1~18.04.9.3","1.1.1-1ubuntu2.fips.2.1~18.04.13.2","1.1.1-1ubuntu2.fips.2.1~18.04.15","1.1.1-1ubuntu2.fips.2.1~18.04.15.1","1.1.1-1ubuntu2.fips.2.1~18.04.15.2","1.1.1-1ubuntu2.fips.2.1~18.04.17","1.1.1-1ubuntu2.fips.2.1~18.04.20","1.1.1-1ubuntu2.fips.2.1~18.04.21","1.1.1-1ubuntu2.fips.2.1~18.04.22","1.1.1-1ubuntu2.fips.2.1~18.04.23","1.1.1-1ubuntu2.fips.2.1~18.04.23.3","1.1.1-1ubuntu2.fips.2.1~18.04.23.4","1.1.1-1ubuntu2.fips.2.1~18.04.23.5","1.1.1-1ubuntu2.fips.2.1~18.04.23.6","1.1.1-1ubuntu2.fips.2.1~18.04.23.7","1.1.1-1ubuntu2.fips.2.1~18.04.23.8","1.1.1-1ubuntu2.fips.2.1~18.04.23.9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-1ubuntu2.fips.2.1~18.04.3.1","1.1.1-1ubuntu2.fips.2.1~18.04.15.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.24"}]}],"versions":["1.1.1c-1ubuntu4","1.1.1d-2ubuntu3","1.1.1d-2ubuntu6","1.1.1f-1ubuntu1","1.1.1f-1ubuntu2","1.1.1f-1ubuntu2.1","1.1.1f-1ubuntu2.2","1.1.1f-1ubuntu2.3","1.1.1f-1ubuntu2.4","1.1.1f-1ubuntu2.5","1.1.1f-1ubuntu2.8","1.1.1f-1ubuntu2.9","1.1.1f-1ubuntu2.10","1.1.1f-1ubuntu2.11","1.1.1f-1ubuntu2.12","1.1.1f-1ubuntu2.13","1.1.1f-1ubuntu2.15","1.1.1f-1ubuntu2.16","1.1.1f-1ubuntu2.17","1.1.1f-1ubuntu2.18","1.1.1f-1ubuntu2.19","1.1.1f-1ubuntu2.20","1.1.1f-1ubuntu2.21","1.1.1f-1ubuntu2.22","1.1.1f-1ubuntu2.23"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20190606.20d2e5a1-2ubuntu1","0~20190828.37eef910-3","0~20190828.37eef910-4","0~20191122.bd85bf54-1","0~20191122.bd85bf54-1ubuntu1","0~20191122.bd85bf54-2","0~20191122.bd85bf54-2ubuntu1","0~20191122.bd85bf54-2ubuntu2","0~20191122.bd85bf54-2ubuntu3","0~20191122.bd85bf54-2ubuntu3.1","0~20191122.bd85bf54-2ubuntu3.2","0~20191122.bd85bf54-2ubuntu3.3","0~20191122.bd85bf54-2ubuntu3.4","0~20191122.bd85bf54-2ubuntu3.5","0~20191122.bd85bf54-2ubuntu3.6","0~20191122.bd85bf54-2ubuntu3.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.fips.24"}]}],"versions":["1.1.1f-1ubuntu2.fips.7","1.1.1f-1ubuntu2.fips.7.2","1.1.1f-1ubuntu2.fips.12","1.1.1f-1ubuntu2.fips.13","1.1.1f-1ubuntu2.fips.13.1","1.1.1f-1ubuntu2.fips.16","1.1.1f-1ubuntu2.fips.17","1.1.1f-1ubuntu2.fips.18","1.1.1f-1ubuntu2.fips.19","1.1.1f-1ubuntu2.fips.20","1.1.1f-1ubuntu2.fips.21","1.1.1f-1ubuntu2.fips.22"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1f-1ubuntu2.fips.2.8","1.1.1f-1ubuntu2.fips.7.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.4"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1","2022.02-3ubuntu0.22.04.2","2022.02-3ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-0ubuntu1.19"}]}],"versions":["1.1.1l-1ubuntu1","3.0.0-1ubuntu1","3.0.1-0ubuntu1","3.0.2-0ubuntu1","3.0.2-0ubuntu1.1","3.0.2-0ubuntu1.2","3.0.2-0ubuntu1.4","3.0.2-0ubuntu1.5","3.0.2-0ubuntu1.6","3.0.2-0ubuntu1.7","3.0.2-0ubuntu1.8","3.0.2-0ubuntu1.9","3.0.2-0ubuntu1.10","3.0.2-0ubuntu1.12","3.0.2-0ubuntu1.13","3.0.2-0ubuntu1.14","3.0.2-0ubuntu1.15","3.0.2-0ubuntu1.16","3.0.2-0ubuntu1.17","3.0.2-0ubuntu1.18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["12.22.5~dfsg-5ubuntu1","12.22.7~dfsg-2ubuntu1","12.22.7~dfsg-2ubuntu3","12.22.9~dfsg-1ubuntu2","12.22.9~dfsg-1ubuntu3","12.22.9~dfsg-1ubuntu3.1","12.22.9~dfsg-1ubuntu3.2","12.22.9~dfsg-1ubuntu3.3","12.22.9~dfsg-1ubuntu3.4","12.22.9~dfsg-1ubuntu3.5","12.22.9~dfsg-1ubuntu3.6","12.22.9~dfsg-1ubuntu3.6+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.2-0ubuntu1.10+Fips1","3.0.2-0ubuntu1.12+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"openssl-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.5-0ubuntu0.1+Fips2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-0ubuntu1.19+Fips1"}]}],"versions":["3.0.2-0ubuntu1.10+Fips1","3.0.2-0ubuntu1.12+Fips1","3.0.2-0ubuntu1.14+Fips1","3.0.2-0ubuntu1.15+Fips1","3.0.2-0ubuntu1.16+Fips1","3.0.2-0ubuntu1.17+Fips1","3.0.2-0ubuntu1.18+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"openssl-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.5-0ubuntu0.1+Fips2.1","3.0.5-0ubuntu0.2+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.02-2ubuntu0.6"}]}],"versions":["2023.05-2","2023.11-2","2023.11-3","2023.11-4","2023.11-5","2023.11-6","2023.11-8","2024.02-1","2024.02-2","2024.02-2ubuntu0.1","2024.02-2ubuntu0.3","2024.02-2ubuntu0.4","2024.02-2ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-0ubuntu3.5"}]}],"versions":["3.0.10-1ubuntu2","3.0.10-1ubuntu2.1","3.0.10-1ubuntu3","3.0.10-1ubuntu4","3.0.13-0ubuntu2","3.0.13-0ubuntu3","3.0.13-0ubuntu3.1","3.0.13-0ubuntu3.2","3.0.13-0ubuntu3.3","3.0.13-0ubuntu3.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"openssl-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-0ubuntu3.6+Fips1"}]}],"versions":["3.0.13-0ubuntu3+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.02-8ubuntu3"}]}],"versions":["2025.02-3ubuntu2","2025.02-8","2025.02-8ubuntu1","2025.02-8ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.02-8ubuntu3"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.24"}]}],"versions":["1.1.1c-1ubuntu4","1.1.1d-2ubuntu3","1.1.1d-2ubuntu6","1.1.1f-1ubuntu1","1.1.1f-1ubuntu2","1.1.1f-1ubuntu2.1","1.1.1f-1ubuntu2.2","1.1.1f-1ubuntu2.3","1.1.1f-1ubuntu2.4","1.1.1f-1ubuntu2.5","1.1.1f-1ubuntu2.8","1.1.1f-1ubuntu2.9","1.1.1f-1ubuntu2.10","1.1.1f-1ubuntu2.11","1.1.1f-1ubuntu2.12","1.1.1f-1ubuntu2.13","1.1.1f-1ubuntu2.15","1.1.1f-1ubuntu2.16","1.1.1f-1ubuntu2.17","1.1.1f-1ubuntu2.18","1.1.1f-1ubuntu2.19","1.1.1f-1ubuntu2.20","1.1.1f-1ubuntu2.21","1.1.1f-1ubuntu2.22","1.1.1f-1ubuntu2.23"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-0ubuntu1.19"}]}],"versions":["1.1.1l-1ubuntu1","3.0.0-1ubuntu1","3.0.1-0ubuntu1","3.0.2-0ubuntu1","3.0.2-0ubuntu1.1","3.0.2-0ubuntu1.2","3.0.2-0ubuntu1.4","3.0.2-0ubuntu1.5","3.0.2-0ubuntu1.6","3.0.2-0ubuntu1.7","3.0.2-0ubuntu1.8","3.0.2-0ubuntu1.9","3.0.2-0ubuntu1.10","3.0.2-0ubuntu1.12","3.0.2-0ubuntu1.13","3.0.2-0ubuntu1.14","3.0.2-0ubuntu1.15","3.0.2-0ubuntu1.16","3.0.2-0ubuntu1.17","3.0.2-0ubuntu1.18"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-0ubuntu3.5"}]}],"versions":["3.0.10-1ubuntu2","3.0.10-1ubuntu2.1","3.0.10-1ubuntu3","3.0.10-1ubuntu4","3.0.13-0ubuntu2","3.0.13-0ubuntu3","3.0.13-0ubuntu3.1","3.0.13-0ubuntu3.2","3.0.13-0ubuntu3.3","3.0.13-0ubuntu3.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.4"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1","2022.02-3ubuntu0.22.04.2","2022.02-3ubuntu0.22.04.3"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.02-2ubuntu0.6"}]}],"versions":["2023.05-2","2023.11-2","2023.11-3","2023.11-4","2023.11-5","2023.11-6","2023.11-8","2024.02-1","2024.02-2","2024.02-2ubuntu0.1","2024.02-2ubuntu0.3","2024.02-2ubuntu0.4","2024.02-2ubuntu0.5"],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-4.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"500f_firmware"},{"vendor":"netapp","product":"8300_firmware"},{"vendor":"netapp","product":"8700_firmware"},{"vendor":"netapp","product":"a250_firmware"},{"vendor":"netapp","product":"a400_firmware"},{"vendor":"netapp","product":"a700s_firmware"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"bootstrap_os"},{"vendor":"netapp","product":"brocade_fabric_operating_system"},{"vendor":"netapp","product":"c250_firmware"},{"vendor":"netapp","product":"c400_firmware"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410c_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h610c_firmware"},{"vendor":"netapp","product":"h610s_firmware"},{"vendor":"netapp","product":"h615c_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"netapp","product":"manageability_software_development_kit"},{"vendor":"netapp","product":"management_services_for_element_software_and_netapp_hci"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"ontap_tools"},{"vendor":"netapp","product":"snapcenter"},{"vendor":"netapp","product":"snapmanager"},{"vendor":"netapp","product":"solidfire_\\\u0026_hci_management_node"},{"vendor":"netapp","product":"solidfire_\\\u0026_hci_storage_node"},{"vendor":"openssl","product":"openssl"}],"references":[{"url":"https://openssl-library.org/news/secadv/20250120.txt","tags":["vendor-advisory","Vendor Advisory","advisory","web","report"]},{"url":"https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","tags":["patch","Patch","fix","web"]},{"url":"https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","tags":["patch","Patch","fix","web"]},{"url":"https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","tags":["patch","Patch","fix","web"]},{"url":"https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","tags":["patch","Patch","fix","web"]},{"url":"https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","tags":["patch","Patch","fix","web"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86","tags":["patch","Permissions Required","fix","web"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded","tags":["patch","Permissions Required","fix","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/01/20/2","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20250124-0005/","tags":["Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20250418-0010/","tags":["Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20250502-0006/","tags":["Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-13176","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250124-0005","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20250418-0010","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20250502-0006","tags":["web"]},{"url":"https://github.com/advisories/GHSA-r9fv-h47r-823f","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-13176","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:15699","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-13176","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21574","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21575","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21577","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21579","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21580","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21581","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21584","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21585","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21588","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30681","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30682","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30683","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30684","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30685","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30687","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30688","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30689","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30693","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30695","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30696","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30699","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30703","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30704","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30705","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30715","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30721","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30722","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50077","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50078","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50079","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50080","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50081","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50082","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50083","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50084","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50085","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50086","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50087","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50088","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50091","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50092","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50093","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50094","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50096","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50097","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50098","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50099","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50100","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50101","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50102","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50104","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5399","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359885","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359888","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359892","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359894","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359895","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359899","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359900","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359902","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359903","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359911","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359918","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359920","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359924","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359928","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359930","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359932","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359934","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359938","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359940","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359943","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359944","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359945","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359947","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359950","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359963","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359964","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359972","tags":["report"]},{"url":"https://bugzilla.redhat.com/2370920","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380264","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380273","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380274","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380278","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380280","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380283","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380284","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380290","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380291","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380295","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380298","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380306","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380308","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380309","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380310","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380312","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380313","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380320","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380321","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380322","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380326","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380327","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380334","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380335","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-15699.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:16046","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-16046.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-13176","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1751142817.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1751888871.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1751889283.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1759865335.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1780682107.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28389","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28390","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1780682108.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1780683040.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1785400004.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13176.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-13176","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0025.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33942","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2025-0101.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34106","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2025-0210.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34478","tags":["report"]},{"url":"https://openssl-library.org/news/secadv/20241016.txt","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4741","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5363","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1192","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1193","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1194","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1287","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1288","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:15699","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359895","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359918","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380335","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502042-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236136","tags":["report"]},{"url":"https://bugzilla.suse.com/1236599","tags":["report"]},{"url":"https://bugzilla.suse.com/1243459","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-13176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27587","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250345-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250349-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250356-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1226463","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250387-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250388-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250390-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250430-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250613-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236771","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250613-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250613-3/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520233-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520406-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240366","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520464-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263835-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216950","tags":["report"]},{"url":"https://bugzilla.suse.com/1243014","tags":["report"]},{"url":"https://bugzilla.suse.com/1247463","tags":["report"]},{"url":"https://bugzilla.suse.com/1250233","tags":["report"]},{"url":"https://bugzilla.suse.com/1257274","tags":["report"]},{"url":"https://bugzilla.suse.com/1266344","tags":["report"]},{"url":"https://bugzilla.suse.com/1266347","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42764","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-13176","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-13176","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7264-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7278-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7894-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-9143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-4304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-4450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-5678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-6237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-0727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-1298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-2511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-4741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-5535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-6119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-2295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-9232","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2SJWUM3ZDQ76XIG2YCDVO2XQE6VZ5SCY/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-13176","title":"Timing side-channel in ECDSA signature computation","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T13:29:57.047Z","modified":"2026-11-06T21:43:11.44Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-385"],"updated_at":"2026-11-06T22:31:26.121Z"}],"euvd":[{"id":"EUVD-2024-51400","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T13:29:57Z","modified":"2026-11-06T21:43:11Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-06T23:07:29.923788Z"}],"ghsa":[{"id":"GHSA-r9fv-h47r-823f","title":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key...","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.","status":"published","published":"2025-01-20T15:31:22Z","modified":"2025-11-03T21:32:14Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-385"],"updated_at":"2026-11-02T15:04:20.412437Z"}],"nvd":[{"id":"CVE-2024-13176","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T14:15:26.247Z","modified":"2026-11-09T20:22:46.043Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-385"],"updated_at":"2026-11-09T22:15:48.061802Z"}],"osv":[{"id":"ALPINE-CVE-2024-13176","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T14:15:26.247Z","modified":"2026-11-10T09:30:02.963464448Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-10T09:56:02.898004Z"},{"id":"BELL-CVE-2024-13176","status":"published","published":"2025-01-21T05:58:31.746725Z","modified":"2026-11-08T07:15:02.275564766Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-08T07:31:51.997113Z"},{"id":"CVE-2024-13176","title":"Timing side-channel in ECDSA signature computation","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T13:29:57.047Z","modified":"2026-11-11T13:28:55.332394139Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-385"],"updated_at":"2026-11-07T11:15:38.581573Z"},{"id":"DEBIAN-CVE-2024-13176","description":"Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation.  Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency.  There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low.  The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T14:15:26.247Z","modified":"2026-11-10T09:47:35.783018009Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-07T10:14:19.880839Z"},{"id":"JLSEC-2026-248","title":"Issue summary: A timing side-channel which could potentially allow recovering the private key exists...","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2026-04-27T18:33:55.942Z","modified":"2026-07-25T18:23:49.991702279Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2025-1190","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\n\nIssue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.(CVE-2024-13176)\n\nIssue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.(CVE-2024-4741)","status":"published","published":"2025-02-28T11:08:17Z","modified":"2026-08-18T01:18:48.163378448Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1191","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\n\nIssue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \u0026quot;keylen\u0026quot; parameter or the IV length, via the \u0026quot;ivlen\u0026quot; parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST\u0026apos;s SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.(CVE-2023-5363)\n\nIssue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.(CVE-2024-13176)\n\nIssue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.(CVE-2024-4741)","status":"published","published":"2025-02-28T11:08:17Z","modified":"2026-08-18T01:18:48.198476026Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1192","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\n\nIssue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \u0026quot;keylen\u0026quot; parameter or the IV length, via the \u0026quot;ivlen\u0026quot; parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST\u0026apos;s SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.(CVE-2023-5363)\n\nIssue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.(CVE-2024-13176)\n\nIssue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.(CVE-2024-4741)","status":"published","published":"2025-02-28T11:08:17Z","modified":"2026-08-18T01:17:43.870608762Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1193","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\n\nIssue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.(CVE-2024-13176)\n\nIssue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.(CVE-2024-4741)","status":"published","published":"2025-02-28T11:08:17Z","modified":"2026-08-18T01:18:48.096677526Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1194","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\n\nIssue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.(CVE-2024-13176)\n\nIssue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.(CVE-2024-4741)","status":"published","published":"2025-02-28T11:08:17Z","modified":"2026-08-18T01:17:43.86829107Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1287","title":"compat-openssl11 security update","description":"OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.\r\n\r\nSecurity Fix(es):\n\nIssue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.(CVE-2024-13176)","status":"published","published":"2025-03-14T11:08:23Z","modified":"2026-08-18T01:18:49.123577977Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1288","title":"compat-openssl11 security update","description":"OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.\r\n\r\nSecurity Fix(es):\n\nIssue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.(CVE-2024-13176)\n\nIssue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \u0026quot;no overlap\u0026quot;\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available.(CVE-2024-5535)","status":"published","published":"2025-03-14T11:08:23Z","modified":"2026-08-18T01:17:49.88493993Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"RLSA-2025:15699","title":"Moderate: mysql-selinux and mysql8.4 security update","description":"MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.\n\nSecurity Fix(es):\n\n* openssl: Timing side-channel in ECDSA signature computation (CVE-2024-13176)\n\n* mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)\n\n* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688)\n\n* mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699)\n\n* mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721)\n\n* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682)\n\n* mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683)\n\n* mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715)\n\n* mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574)\n\n* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585)\n\n* mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21588)\n\n* mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681)\n\n* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577)\n\n* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687)\n\n* mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580)\n\n* mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696)\n\n* mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705)\n\n* mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575)\n\n* mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579)\n\n* mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685)\n\n* mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704)\n\n* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581)\n\n* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689)\n\n* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695)\n\n* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703)\n\n* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)\n\n* mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584)\n\n* mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684)\n\n* curl: libcurl: WebSocket endless loop (CVE-2025-5399)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092)\n\n* mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077)\n\n* mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101)\n\n* mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085)\n\n* mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082)\n\n* mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097)\n\n* mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087)\n\n* mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084)\n\n* mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100)\n\n* mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094)\n\n* mysql: Optimizer  unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:49.834505Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2024-13176","description":"Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low. The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T14:15:00Z","modified":"2026-11-09T12:49:26.44685599Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"ALSA-2025:15699","title":"Moderate: mysql-selinux and mysql8.4 security update","description":"MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.  \n\nSecurity Fix(es):  \n\n  * openssl: Timing side-channel in ECDSA signature computation (CVE-2024-13176)\n  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688)\n  * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699)\n  * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682)\n  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683)\n  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715)\n  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585)\n  * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21588)\n  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681)\n  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687)\n  * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580)\n  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696)\n  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705)\n  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575)\n  * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579)\n  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685)\n  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689)\n  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695)\n  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703)\n  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)\n  * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584)\n  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684)\n  * curl: libcurl: WebSocket endless loop (CVE-2025-5399)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092)\n  * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077)\n  * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101)\n  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085)\n  * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082)\n  * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097)\n  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087)\n  * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084)\n  * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100)\n  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-09-11T00:00:00Z","modified":"2026-10-29T11:30:04.934064543Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:16046","title":"Moderate: mysql:8.4 security update","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  \n\nSecurity Fix(es):  \n\n  * openssl: Timing side-channel in ECDSA signature computation (CVE-2024-13176)\n  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688)\n  * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699)\n  * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682)\n  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683)\n  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715)\n  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585)\n  * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21588)\n  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681)\n  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687)\n  * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580)\n  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696)\n  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705)\n  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575)\n  * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579)\n  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685)\n  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581)\n  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689)\n  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695)\n  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703)\n  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)\n  * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584)\n  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684)\n  * curl: libcurl: WebSocket endless loop (CVE-2025-5399)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092)\n  * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077)\n  * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101)\n  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085)\n  * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082)\n  * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097)\n  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087)\n  * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084)\n  * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100)\n  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-09-17T00:00:00Z","modified":"2026-10-29T11:32:28.250442929Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-55889","title":"CVE-2024-13176 affecting package openssl for versions less than 3.3.3-1","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T14:15:26Z","modified":"2026-04-21T04:49:46.336228Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"AZL-55894","title":"CVE-2024-13176 affecting package edk2 for versions less than 20240524git3e722403cd16-6","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T14:15:26Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:20.996398Z"},{"id":"AZL-56010","title":"CVE-2024-13176 affecting package openssl for versions less than 1.1.1k-36","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T14:15:26Z","modified":"2026-04-21T04:36:02.724482Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"AZL-78537","title":"CVE-2024-13176 affecting package openssl-fips-provider 3.1.2-2","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","status":"published","published":"2025-01-20T14:15:26Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:24.626116Z"},{"id":"CLSA-2025-1751142817","title":"openssl: Fix of CVE-2024-13176","description":"- CVE-2024-13176: fix timing side-channel in ECDSA signature computation","status":"published","published":"2025-06-28T20:33:42Z","modified":"2026-06-01T00:33:21.24290565Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751888871","title":"openssl: Fix of CVE-2024-13176","description":"- CVE-2024-13176: fix timing side-channel in ECDSA signature computation","status":"published","published":"2025-07-07T11:47:56Z","modified":"2026-06-01T00:32:58.856141929Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751889283","title":"openssl: Fix of CVE-2024-13176","description":"- CVE-2024-13176: fix timing side-channel in ECDSA signature computation","status":"published","published":"2025-07-07T11:54:47Z","modified":"2026-06-01T00:33:13.38583033Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1759865335","title":"openssl: Fix of CVE-2024-13176","description":"- CVE-2024-13176: fix timing side-channel in ECDSA signature computation\n  vulnerability","status":"published","published":"2025-10-07T19:29:05Z","modified":"2026-06-01T00:31:17.414773591Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1780682107","title":"openssl11: Fix of 10 CVEs","description":"- CVE-2021-3711: fix SM2 decryption buffer overflow; check the plaintext buffer\n  is large enough when decrypting SM2; add extended tests for SM2\n- CVE-2022-3996: fix X.509 policy constraints double-locking denial of service\n- CVE-2023-0464: fix excessive resource use verifying X.509 policy constraints\n- CVE-2023-0466: fix X509_VERIFY_PARAM_add0_policy() does not enable policy check\n- CVE-2023-2650: restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt translates\n- CVE-2024-13176: fix timing side-channel in ECDSA signature computation\n- CVE-2024-5535: validate provided client list in SSL_select_next_proto\n- CVE-2025-9230: fix out-of-bounds read and write in RFC 3211 KEK unwrap\n- CVE-2025-69419: fix one-byte write-before-buffer in PKCS#12 BMPString conversion\n- CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex()\n- CVE-2026-28387: fix use-after-free / double-free in dane_match()\n- CVE-2026-28388: fix NULL dereference in check_delta_base()\n- CVE-2026-28389: fix NULL dereference in dh/ecdh_cms_set_shared_info()\n- CVE-2026-28390: fix NULL dereference in rsa_cms_decrypt()","status":"published","published":"2026-10-19T20:44:42Z","modified":"2026-10-26T09:43:19.372450535Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1780682108","title":"openssl11: Fix of 10 CVEs","description":"- CVE-2021-3711: fix SM2 decryption buffer overflow; check the plaintext buffer\n  is large enough when decrypting SM2; add extended tests for SM2\n- CVE-2022-3996: fix X.509 policy constraints double-locking denial of service\n- CVE-2023-0464: fix excessive resource use verifying X.509 policy constraints\n- CVE-2023-0466: fix X509_VERIFY_PARAM_add0_policy() does not enable policy check\n- CVE-2023-2650: restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt translates\n- CVE-2024-13176: fix timing side-channel in ECDSA signature computation\n- CVE-2024-5535: validate provided client list in SSL_select_next_proto\n- CVE-2025-9230: fix out-of-bounds read and write in RFC 3211 KEK unwrap\n- CVE-2025-69419: fix one-byte write-before-buffer in PKCS#12 BMPString conversion\n- CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex()\n- CVE-2026-28387: fix use-after-free / double-free in dane_match()\n- CVE-2026-28388: fix NULL dereference in check_delta_base()\n- CVE-2026-28389: fix NULL dereference in dh/ecdh_cms_set_shared_info()\n- CVE-2026-28390: fix NULL dereference in rsa_cms_decrypt()","status":"published","published":"2026-10-19T20:30:57Z","modified":"2026-10-26T09:43:24.553701582Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1780683040","title":"openssl11: Fix of 10 CVEs","description":"- CVE-2021-3711: fix SM2 decryption buffer overflow; check the plaintext buffer\n  is large enough when decrypting SM2; add extended tests for SM2\n- CVE-2022-3996: fix X.509 policy constraints double-locking denial of service\n- CVE-2023-0464: fix excessive resource use verifying X.509 policy constraints\n- CVE-2023-0466: fix X509_VERIFY_PARAM_add0_policy() does not enable policy check\n- CVE-2023-2650: restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt translates\n- CVE-2024-13176: fix timing side-channel in ECDSA signature computation\n- CVE-2024-5535: validate provided client list in SSL_select_next_proto\n- CVE-2025-9230: fix out-of-bounds read and write in RFC 3211 KEK unwrap\n- CVE-2025-69419: fix one-byte write-before-buffer in PKCS#12 BMPString conversion\n- CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex()\n- CVE-2026-28387: fix use-after-free / double-free in dane_match()\n- CVE-2026-28388: fix NULL dereference in check_delta_base()\n- CVE-2026-28389: fix NULL dereference in dh/ecdh_cms_set_shared_info()\n- CVE-2026-28390: fix NULL dereference in rsa_cms_decrypt()","status":"published","published":"2026-10-19T20:23:13Z","modified":"2026-10-26T09:43:24.002329629Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1785400004","title":"openssl: Fix of CVE-2024-13176","description":"- CVE-2024-13176: fix timing side-channel in ECDSA signature computation\n  caused by the variable length of the inverted nonce","status":"published","published":"2026-07-30T13:31:35Z","modified":"2026-10-26T09:31:42.164284989Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"DLA-4176-1","title":"openssl - security update","status":"published","published":"2025-05-24T00:00:00Z","modified":"2026-03-09T01:20:23.459313Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0025","title":"Updated openssl packages fix security vulnerability","description":"Timing side-channel in ECDSA signature computation. (CVE-2024-13176)\n","status":"published","published":"2025-01-26T03:20:24Z","modified":"2026-04-16T04:44:08.304142239Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"MGASA-2025-0101","title":"Updated quictls packages fix security vulnerability","description":"Timing side-channel in ECDSA signature computation. (CVE-2024-13176)\n","status":"published","published":"2025-03-17T16:33:29Z","modified":"2026-04-16T04:43:37.059137426Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"MGASA-2025-0210","title":"Updated quictls packages with minor bug fixes","description":"Miscellaneous minor bug fixes.\n","status":"published","published":"2025-07-19T17:55:11Z","modified":"2026-04-16T04:42:53.322915196Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:14696-1","title":"libopenssl-3-devel-3.2.3-4.1 on GA media","description":"These are all security issues fixed in the libopenssl-3-devel-3.2.3-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-25T00:00:00Z","modified":"2025-05-07T18:15:44.224382Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2025:02042-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2025-27587: timing side-channel vulnerability in the P-384 implementation when used with ECDSA (bsc#1243459).\n- CVE-2024-12797: Fixed that RFC7250 handshakes with unauthenticated servers don't abort as expected. (bsc#1236599)\n- CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136)\n","status":"published","published":"2025-06-20T10:38:46Z","modified":"2026-03-23T04:49:33.848739Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:0345-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136) \n","status":"published","published":"2025-02-03T20:04:07Z","modified":"2026-02-04T03:12:51.272549Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0349-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136) \n","status":"published","published":"2025-02-04T08:34:48Z","modified":"2026-02-04T03:05:37.117941Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0356-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136) \n","status":"published","published":"2025-02-04T13:33:47Z","modified":"2026-02-04T02:18:52.640646Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0387-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136).\n","status":"published","published":"2025-02-07T17:16:21Z","modified":"2026-02-04T02:23:18.330029Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0388-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136).\n","status":"published","published":"2025-02-07T17:18:44Z","modified":"2026-02-04T03:21:40.446017Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0390-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136) \n","status":"published","published":"2025-02-10T07:33:48Z","modified":"2026-02-04T03:47:59.485858Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0430-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136).\n","status":"published","published":"2025-02-11T14:13:33Z","modified":"2026-02-04T04:22:08.929885Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0613-1","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136).\n\nOther bugfixes:\n\n- Non approved PBKDF parameters wrongly resulting as approved (bsc#1236771).\n","status":"published","published":"2025-02-21T10:37:55Z","modified":"2026-02-04T02:21:54.957602Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0613-2","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136).\n\nOther bugfixes:\n\n- Non approved PBKDF parameters wrongly resulting as approved (bsc#1236771).\n","status":"published","published":"2025-05-15T08:51:28Z","modified":"2025-05-15T08:51:28Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0613-3","title":"Security update for openssl-1_1","description":"This update for openssl-1_1 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136).\n\nOther bugfixes:\n\n- Non approved PBKDF parameters wrongly resulting as approved (bsc#1236771).\n","status":"published","published":"2025-05-15T08:51:28Z","modified":"2026-03-23T04:47:04.819371Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:20233-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation(bsc#1236136).\n","status":"published","published":"2025-03-07T16:29:39Z","modified":"2026-03-23T04:50:44.955358Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20406-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2025-27587: Fixed Minerva side channel vulnerability in P-384 on PPC arch (bsc#1240366)\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)\n","status":"published","published":"2025-06-13T11:05:04Z","modified":"2026-03-23T04:48:15.97612Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20464-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)\n","status":"published","published":"2025-07-03T10:28:04Z","modified":"2026-03-23T04:50:50.76254Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2026:3835-1","title":"Security update for openssl, openssl-3","description":"This update for openssl, openssl-3 fixes the following issues:\n\nOpenSSL is updated to 3.5.0 in SLE-15-SP7: (jsc#PED-16072)\n\n* Enables Post-Quantum Cryptography (PQC) TLS support\n\nSecurity issues fixed:\n\n* CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)\n* CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)\n* CVE-2025-9231: Fix timing side-channel in SM2 algorithm on 64 bit ARM (bsc#1250233)\n* CVE-2024-13176: Fix timing side-channel in ECDSA signature computation (bsc#1236136)\n\nPOWER performance enhancements:\n\n* Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)\n\n- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)\n- Fix check %{suse_version} \u003e 1600 (jsc#PED-15816)\n- Fix NULL pointer dereference when processing an OCSP response\n- Remove showciphers.c in favor of openssl ciphers\n- Use %ldconfig_scriptlets\n- Enable livepatching support for ppc64le [bsc#1257274]\n- Move ssl configuration files to the libopenssl package [bsc#1247463]\n- Don't install unneeded NOTES\n- Disable LTO for userspace livepatching [jsc#PED-13245]\n- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]\n- FIPS: Fix the speed command in FIPS mode for KMAC\n\n- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and\n  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]\n\nUpdate to 3.5.0:\n\n\n* Changes:\n\n    - Default encryption cipher for the req, cms, and smime applications\n      changed from des-ede3-cbc to aes-256-cbc.\n    - The default TLS supported groups list has been changed to include\n      and prefer hybrid PQC KEM groups. Some practically unused groups\n      were removed from the default list.\n    - The default TLS keyshares have been changed to offer X25519MLKEM768\n      and and X25519.\n    - All BIO_meth_get_*() functions were deprecated.\n\n  * New features:\n\n    - Support for server side QUIC (RFC 9000)\n    - Support for 3rd party QUIC stacks including 0-RTT support\n    - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)\n    - A new configuration option no-tls-deprecated-ec to disable support\n      for TLS groups deprecated in RFC8422\n    - A new configuration option enable-fips-jitter to make the FIPS\n      provider to use the JITTER seed source\n    - Support for central key generation in CMP\n    - Support added for opaque symmetric key objects (EVP_SKEY)\n    - Support for multiple TLS keyshares and improved TLS key establishment\n      group configurability\n    - API support for pipelining in provided cipher algorithms\n\nChanges between 3.3.0 and 3.4.0:\n\n  * Changes:\n\n    - Deprecation of TS_VERIFY_CTX_set_* functions and addition of\n      replacement TS_VERIFY_CTX_set0_* functions with improved semantics\n    - The X25519 and X448 key exchange implementation in the FIPS provider\n      is unapproved and has fips=no property.\n    - SHAKE-128 and SHAKE-256 implementations have no default digest length\n      anymore. That means these algorithms cannot be used with\n      EVP_DigestFinal/_ex() unless the xoflen param is set before.\n    - Setting config_diagnostics=1 in the config file will cause errors to\n      be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an\n      error in the ssl module configuration.\n    - An empty renegotiate extension will be used in TLS client hellos\n      instead of the empty renegotiation SCSV, for all connections with a\n      minimum TLS version \u003e 1.0.\n    - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and\n      SSL_CTX_flush_sessions() functions in favor of their respective _ex\n      functions which are Y2038-safe on platforms with Y2038-safe time_t\n\n  * New features:\n\n    - Support for directly fetched composite signature algorithms such as\n      RSA-SHA2-256 including new API functions\n    - FIPS indicators support in the FIPS provider and various updates of\n      the FIPS provider required for future FIPS 140-3 validations\n    - Implementation of RFC 9579 (PBMAC1) in PKCS#12\n    - An optional additional random seed source RNG JITTER using a statically\n      linked jitterentropy library\n    - New options -not_before and -not_after for explicit setting start and\n      end dates of certificates created with the req and x509 apps\n    - Support for integrity-only cipher suites TLS_SHA256_SHA256 and\n      TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150\n    - Support for retrieving certificate request templates and CRLs in CMP\n    - Support for additional X.509v3 extensions related to Attribute Certificates\n    - Initial Attribute Certificate (RFC 5755) support\n    - Possibility to customize ECC groups initialization to use precomputed\n      values to save CPU time and use of this feature by the P-256 implementation\n\nChanges between 3.2.0 and 3.3.0:\n\n  * Changes:\n\n    - Optimized AES-CTR for ARM Neoverse V1 and V2\n    - Various optimizations for cryptographic routines using RISC-V vector\n      crypto extensions\n    - Added assembly implementation for md5 on loongarch64\n    - Accept longer context for TLS 1.2 exporters\n    - The activate and soft_load configuration settings for providers in\n      openssl.cnf have been updated to require a value of [1|yes|true|on]\n      (in lower or UPPER case) to enable the setting. Conversely a value of\n      [0|no|false|off] will disable the setting.\n    - In openssl speed, changed the default hash function used with hmac from\n      md5 to sha256.\n    - The -verify option to the openssl crl and openssl req will make the\n      program exit with 1 on failure.\n    - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),\n      and related functions have been augmented to check for a minimum length\n      of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.\n    - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1\n      if called with a NULL stack argument.\n    - New limit on HTTP response headers is introduced to HTTP client.\n      The default limit is set to 256 header lines.\n\n  * Bug fixes and mitigations:\n\n    - The BIO_get_new_index() function can only be called 127 times before\n      it reaches its upper bound of BIO_TYPE_MASK and will now return -1\n      once its exhausted.\n\n  * new features:\n\n    - Support for qlog for tracing QUIC connections has been added\n    - Added APIs to allow configuring the negotiated idle timeout for QUIC\n      connections, and to allow determining the number of additional streams\n      that can currently be created for a QUIC connection.\n    - Added APIs to allow disabling implicit QUIC event processing for QUIC\n      SSL objects\n    - Added APIs to allow querying the size and utilisation of a QUIC\n      stream's write buffer\n    - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)\n      condition in an optimised way when using QUIC.\n    - Limited support for polling of QUIC connection and stream objects in a\n      non-blocking manner.\n    - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple\n      times with different output sizes.\n    - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable\n      output length.\n    - The EVP_PKEY_fromdata function has been augmented to allow for the\n      derivation of CRT (Chinese Remainder Theorem) parameters when requested\n    - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()\n      using time_t which is Y2038 safe on 32 bit systems when 64 bit time\n      is enabled.\n    - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms\n      config\n      options and the respective calls to SSL[_CTX]_set1_sigalgs() and\n      SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored\n      and the configuration will still be used.\n    - Added -set_issuer and -set_subject options to openssl x509 to override\n      the Issuer and Subject when creating a certificate. The -subj option\n      now is an alias for -set_subject.\n    - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483\n    - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3\n      server to prefer session resumption using PSK-only key exchange over\n      PSK with DHE, if both are available.\n    - New atexit configuration switch, which controls whether the OPENSSL_cleanup\n      is registered when libcrypto is unloaded.\n    - Added X509_STORE_get1_objects to avoid issues with the existing\n      X509_STORE_get0_objects API in multi-threaded applications.\n    - Support for using certificate profiles and extened delayed delivery in CMP\n\n- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]\n\n- Introduce --without lto. When %{optflags} contains -flto=*, tests cases are\n  also built using -flto=* which significantly increases build times, this\n  option disables lto which improve iteration times when developing.\n\nUpdate to 3.2.4:\n\n- Remove the engines' directories and symlinks that were added to\n  allow parallel installations with openssl-1_1.\n- Add ktls capability [bsc#1216950]\n\nThis update also rebuilds nodejs24 to enable PQC.\n","status":"published","published":"2026-09-10T16:05:54Z","modified":"2026-09-10T17:12:46.701907223Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-7278-1","title":"openssl vulnerabilities","description":"George Pantelakis and Alicja Kario discovered that OpenSSL had a timing\nside-channel when performing ECDSA signature computations. A remote\nattacker could possibly use this issue to recover private data.\n(CVE-2024-13176)\n\nIt was discovered that OpenSSL incorrectly handled certain memory\noperations when using low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial. When being used in this uncommon\nfashion, a remote attacker could use this issue to cause OpenSSL to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2024-9143)\n","status":"published","published":"2025-02-20T17:40:04Z","modified":"2026-11-09T12:46:31.324920603Z","updated_at":"2026-11-09T12:55:09.79476Z"},{"id":"USN-7894-1","title":"edk2 vulnerabilities","description":"It was discovered that EDK II was susceptible to a predictable TCP Initial\nSequence Number. An attacker could possibly use this issue to gain\nunauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu\n24.04 LTS. (CVE-2023-45236, CVE-2023-45237)\n\nIt was discovered that EDK II incorrectly handled S3 sleep. An attacker\ncould possibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-1298)\n\nIt was discovered that the EDK II PE/COFF loader incorrectly handled\ncertain memory operations. An attacker could possibly use this issue to\ncause a denial of service, obtain sensitive information, or execute\narbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu\n24.04 LTS. (CVE-2024-38796)\n\nIt was discovered that the EDK II PE image hashing function incorrectly\nhandled certain memory operations. An attacker could possibly use this\nissue to cause a denial of service, or execute arbitrary code.\n(CVE-2024-38797)\n\nIt was discovered that the EDK II BIOS incorrectly handled certain memory\noperations. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2024-38805, CVE-2025-2295)\n\nIt was discovered that EDK II incorrectly handled the enabling of MCE. An\nattacker could possibly use this issue to cause a denial of service, or\nexecute arbitrary code. (CVE-2025-3770)\n\nIt was discovered that the OpenSSL library embedded in EDK II contained\nmultiple vulnerabilties. An attacker could possibly use these issues to\ncause a denial of service, obtain sensitive information, or execute\narbitrary code. (CVE-2021-3712, CVE-2022-0778, CVE-2022-4304,\nCVE-2022-4450, CVE-2023-0215, CVE-2023-0286, CVE-2023-0464, CVE-2023-0465,\nCVE-2023-0466, CVE-2023-2650, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678,\nCVE-2023-6237, CVE-2024-0727, CVE-2024-13176, CVE-2024-2511,\nCVE-2024-41996, CVE-2024-4741, CVE-2024-5535, CVE-2024-6119, CVE-2024-9143,\nCVE-2025-9232)","status":"published","published":"2025-11-26T15:05:43Z","modified":"2026-11-09T12:46:35.954753636Z","updated_at":"2026-11-09T12:55:09.79476Z"}]}}